./Ultimate.py --spec ../../sv-benchmarks/c/properties/no-overflow.prp --file ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for overflows Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/config/svcomp-Overflow-64bit-Kojak_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! overflow) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 161acb090810893f5857465330b1e9af98cd436d8b1ab4337fc3709fda2d3260 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-21 23:03:07,665 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-21 23:03:07,667 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-21 23:03:07,691 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-21 23:03:07,699 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-21 23:03:07,704 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-21 23:03:07,706 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-21 23:03:07,707 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-21 23:03:07,709 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-21 23:03:07,710 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-21 23:03:07,711 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-21 23:03:07,712 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-21 23:03:07,713 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-21 23:03:07,714 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-21 23:03:07,717 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-21 23:03:07,720 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-21 23:03:07,722 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-21 23:03:07,730 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-21 23:03:07,732 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-21 23:03:07,734 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-21 23:03:07,736 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-21 23:03:07,737 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-21 23:03:07,738 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-21 23:03:07,740 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-21 23:03:07,743 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-21 23:03:07,744 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-21 23:03:07,744 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-21 23:03:07,745 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-21 23:03:07,746 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-21 23:03:07,747 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-21 23:03:07,747 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-21 23:03:07,748 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-21 23:03:07,749 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-21 23:03:07,750 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-21 23:03:07,751 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-21 23:03:07,751 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-21 23:03:07,752 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-21 23:03:07,753 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-21 23:03:07,753 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-21 23:03:07,754 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-21 23:03:07,755 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-21 23:03:07,756 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/config/svcomp-Overflow-64bit-Kojak_Default.epf [2022-11-21 23:03:07,801 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-21 23:03:07,802 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-21 23:03:07,802 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-21 23:03:07,803 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ALWAYS [2022-11-21 23:03:07,804 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-21 23:03:07,804 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-21 23:03:07,804 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-21 23:03:07,804 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-21 23:03:07,805 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-21 23:03:07,805 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-21 23:03:07,805 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-21 23:03:07,806 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-21 23:03:07,807 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-21 23:03:07,807 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-11-21 23:03:07,807 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-21 23:03:07,809 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-21 23:03:07,809 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-21 23:03:07,810 INFO L136 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2022-11-21 23:03:07,810 INFO L138 SettingsManager]: * Timeout in seconds=1000000 [2022-11-21 23:03:07,810 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-21 23:03:07,810 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2022-11-21 23:03:07,810 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-21 23:03:07,811 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-21 23:03:07,812 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-21 23:03:07,812 INFO L138 SettingsManager]: * Trace refinement strategy=PENGUIN [2022-11-21 23:03:07,813 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-21 23:03:07,813 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-21 23:03:07,813 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! overflow) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 161acb090810893f5857465330b1e9af98cd436d8b1ab4337fc3709fda2d3260 [2022-11-21 23:03:08,095 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-21 23:03:08,177 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-21 23:03:08,180 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-21 23:03:08,181 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-21 23:03:08,182 INFO L275 PluginConnector]: CDTParser initialized [2022-11-21 23:03:08,183 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-11-21 23:03:11,279 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-21 23:03:11,893 INFO L351 CDTParser]: Found 1 translation units. [2022-11-21 23:03:11,894 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i [2022-11-21 23:03:11,934 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/data/8b8857d4a/82d154c826034465b727f5ac8926994f/FLAG52c91f81f [2022-11-21 23:03:11,953 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/data/8b8857d4a/82d154c826034465b727f5ac8926994f [2022-11-21 23:03:11,958 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-21 23:03:11,959 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-21 23:03:11,961 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-21 23:03:11,961 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-21 23:03:11,964 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-21 23:03:11,965 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 11:03:11" (1/1) ... [2022-11-21 23:03:11,966 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5f36483c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:11, skipping insertion in model container [2022-11-21 23:03:11,966 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 11:03:11" (1/1) ... [2022-11-21 23:03:11,975 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-21 23:03:12,137 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-21 23:03:12,677 WARN L1259 CHandler]: Detected problem Invalid redeclaration of the name match at C: (*match)(struct device * , struct v4l2_async_subdev * ) [4482] [2022-11-21 23:03:13,242 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i[155153,155166] [2022-11-21 23:03:14,227 WARN L611 FunctionHandler]: implicit declaration of function ldv_xmalloc [2022-11-21 23:03:14,257 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 23:03:14,325 INFO L203 MainTranslator]: Completed pre-run [2022-11-21 23:03:14,485 WARN L1259 CHandler]: Detected problem Invalid redeclaration of the name match at C: (*match)(struct device * , struct v4l2_async_subdev * ) [4482] [2022-11-21 23:03:14,508 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--gspca--gspca_main.ko-entry_point.cil.out.i[155153,155166] [2022-11-21 23:03:14,981 WARN L611 FunctionHandler]: implicit declaration of function ldv_xmalloc [2022-11-21 23:03:14,992 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 23:03:15,096 INFO L208 MainTranslator]: Completed translation [2022-11-21 23:03:15,097 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15 WrapperNode [2022-11-21 23:03:15,097 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-21 23:03:15,099 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-21 23:03:15,099 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-21 23:03:15,099 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-21 23:03:15,107 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,191 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,324 INFO L138 Inliner]: procedures = 242, calls = 2944, calls flagged for inlining = 95, calls inlined = 71, statements flattened = 4116 [2022-11-21 23:03:15,325 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-21 23:03:15,326 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-21 23:03:15,326 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-21 23:03:15,327 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-21 23:03:15,337 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,337 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,387 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,387 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,544 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,573 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,612 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,638 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,676 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-21 23:03:15,677 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-21 23:03:15,678 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-21 23:03:15,678 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-21 23:03:15,679 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 11:03:15" (1/1) ... [2022-11-21 23:03:15,685 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2022-11-21 23:03:15,695 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/z3 [2022-11-21 23:03:15,710 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) [2022-11-21 23:03:15,768 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (1)] Waiting until timeout for monitored process [2022-11-21 23:03:15,806 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-11-21 23:03:15,806 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-11-21 23:03:15,807 INFO L130 BoogieDeclarations]: Found specification of procedure wxh_to_mode [2022-11-21 23:03:15,807 INFO L138 BoogieDeclarations]: Found implementation of procedure wxh_to_mode [2022-11-21 23:03:15,807 INFO L130 BoogieDeclarations]: Found specification of procedure PDEBUG_MODE [2022-11-21 23:03:15,807 INFO L138 BoogieDeclarations]: Found implementation of procedure PDEBUG_MODE [2022-11-21 23:03:15,807 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-21 23:03:15,807 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-21 23:03:15,807 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-21 23:03:15,808 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-21 23:03:15,808 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-11-21 23:03:15,808 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-11-21 23:03:15,809 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-11-21 23:03:15,809 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-11-21 23:03:15,809 INFO L130 BoogieDeclarations]: Found specification of procedure frame_free [2022-11-21 23:03:15,809 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_free [2022-11-21 23:03:15,809 INFO L130 BoogieDeclarations]: Found specification of procedure alt_xfer [2022-11-21 23:03:15,809 INFO L138 BoogieDeclarations]: Found implementation of procedure alt_xfer [2022-11-21 23:03:15,809 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_streamon [2022-11-21 23:03:15,810 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_streamon [2022-11-21 23:03:15,810 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-11-21 23:03:15,810 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-11-21 23:03:15,810 INFO L130 BoogieDeclarations]: Found specification of procedure dev_mmap [2022-11-21 23:03:15,810 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_mmap [2022-11-21 23:03:15,810 INFO L130 BoogieDeclarations]: Found specification of procedure usb_make_path [2022-11-21 23:03:15,810 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_make_path [2022-11-21 23:03:15,810 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-21 23:03:15,811 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-21 23:03:15,811 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-11-21 23:03:15,811 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-11-21 23:03:15,812 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_streamoff [2022-11-21 23:03:15,812 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_streamoff [2022-11-21 23:03:15,813 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_init_transfer [2022-11-21 23:03:15,813 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_init_transfer [2022-11-21 23:03:15,813 INFO L130 BoogieDeclarations]: Found specification of procedure dev_poll [2022-11-21 23:03:15,813 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_poll [2022-11-21 23:03:15,814 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_interruptible_nested [2022-11-21 23:03:15,814 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_interruptible_nested [2022-11-21 23:03:15,814 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_reqbufs [2022-11-21 23:03:15,814 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_reqbufs [2022-11-21 23:03:15,814 INFO L130 BoogieDeclarations]: Found specification of procedure frame_ready_nolock [2022-11-21 23:03:15,814 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_ready_nolock [2022-11-21 23:03:15,814 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2022-11-21 23:03:15,814 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2022-11-21 23:03:15,815 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-21 23:03:15,815 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-21 23:03:15,815 INFO L130 BoogieDeclarations]: Found specification of procedure frame_ready [2022-11-21 23:03:15,815 INFO L138 BoogieDeclarations]: Found implementation of procedure frame_ready [2022-11-21 23:03:15,815 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-11-21 23:03:15,816 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-11-21 23:03:15,816 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-11-21 23:03:15,816 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-11-21 23:03:15,816 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-21 23:03:15,816 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-21 23:03:15,816 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-21 23:03:15,816 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-21 23:03:15,817 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_set_alt0 [2022-11-21 23:03:15,817 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_set_alt0 [2022-11-21 23:03:15,817 INFO L130 BoogieDeclarations]: Found specification of procedure bulk_irq [2022-11-21 23:03:15,818 INFO L138 BoogieDeclarations]: Found implementation of procedure bulk_irq [2022-11-21 23:03:15,818 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-11-21 23:03:15,819 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-11-21 23:03:15,819 INFO L130 BoogieDeclarations]: Found specification of procedure video_drvdata [2022-11-21 23:03:15,819 INFO L138 BoogieDeclarations]: Found implementation of procedure video_drvdata [2022-11-21 23:03:15,819 INFO L130 BoogieDeclarations]: Found specification of procedure ktime_get [2022-11-21 23:03:15,819 INFO L138 BoogieDeclarations]: Found implementation of procedure ktime_get [2022-11-21 23:03:15,820 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-21 23:03:15,820 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2022-11-21 23:03:15,820 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2022-11-21 23:03:15,820 INFO L130 BoogieDeclarations]: Found specification of procedure module_put [2022-11-21 23:03:15,821 INFO L138 BoogieDeclarations]: Found implementation of procedure module_put [2022-11-21 23:03:15,821 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-21 23:03:15,821 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2022-11-21 23:03:15,821 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2022-11-21 23:03:15,822 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_xmalloc [2022-11-21 23:03:15,822 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_handler_free [2022-11-21 23:03:15,822 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_handler_free [2022-11-21 23:03:15,822 INFO L130 BoogieDeclarations]: Found specification of procedure alloc_and_submit_int_urb [2022-11-21 23:03:15,822 INFO L138 BoogieDeclarations]: Found implementation of procedure alloc_and_submit_int_urb [2022-11-21 23:03:15,822 INFO L130 BoogieDeclarations]: Found specification of procedure strlcpy [2022-11-21 23:03:15,822 INFO L138 BoogieDeclarations]: Found implementation of procedure strlcpy [2022-11-21 23:03:15,823 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2022-11-21 23:03:15,823 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2022-11-21 23:03:15,823 INFO L130 BoogieDeclarations]: Found specification of procedure usb_ifnum_to_if [2022-11-21 23:03:15,824 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_ifnum_to_if [2022-11-21 23:03:15,824 INFO L130 BoogieDeclarations]: Found specification of procedure int_irq [2022-11-21 23:03:15,824 INFO L138 BoogieDeclarations]: Found implementation of procedure int_irq [2022-11-21 23:03:15,825 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_handler_setup [2022-11-21 23:03:15,825 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_handler_setup [2022-11-21 23:03:15,825 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-21 23:03:15,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-21 23:03:15,825 INFO L130 BoogieDeclarations]: Found specification of procedure fill_frame [2022-11-21 23:03:15,825 INFO L138 BoogieDeclarations]: Found implementation of procedure fill_frame [2022-11-21 23:03:15,826 INFO L130 BoogieDeclarations]: Found specification of procedure read_alloc [2022-11-21 23:03:15,826 INFO L138 BoogieDeclarations]: Found implementation of procedure read_alloc [2022-11-21 23:03:15,826 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_stream_off [2022-11-21 23:03:15,826 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_stream_off [2022-11-21 23:03:15,826 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2022-11-21 23:03:15,826 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2022-11-21 23:03:15,826 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-21 23:03:15,826 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-21 23:03:15,827 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-21 23:03:15,827 INFO L130 BoogieDeclarations]: Found specification of procedure isoc_irq [2022-11-21 23:03:15,827 INFO L138 BoogieDeclarations]: Found implementation of procedure isoc_irq [2022-11-21 23:03:15,827 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_dqbuf [2022-11-21 23:03:15,827 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_dqbuf [2022-11-21 23:03:15,828 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_input_create_urb [2022-11-21 23:03:15,828 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_input_create_urb [2022-11-21 23:03:15,828 INFO L130 BoogieDeclarations]: Found specification of procedure ns_to_timeval [2022-11-21 23:03:15,828 INFO L138 BoogieDeclarations]: Found implementation of procedure ns_to_timeval [2022-11-21 23:03:15,828 INFO L130 BoogieDeclarations]: Found specification of procedure video_ioctl2 [2022-11-21 23:03:15,828 INFO L138 BoogieDeclarations]: Found implementation of procedure video_ioctl2 [2022-11-21 23:03:15,828 INFO L130 BoogieDeclarations]: Found specification of procedure video_device_release_empty [2022-11-21 23:03:15,828 INFO L138 BoogieDeclarations]: Found implementation of procedure video_device_release_empty [2022-11-21 23:03:15,829 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-21 23:03:15,829 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_2 [2022-11-21 23:03:15,829 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_2 [2022-11-21 23:03:15,830 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_8 [2022-11-21 23:03:15,833 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_8 [2022-11-21 23:03:15,833 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_5 [2022-11-21 23:03:15,834 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_5 [2022-11-21 23:03:15,835 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_9 [2022-11-21 23:03:15,835 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_9 [2022-11-21 23:03:15,835 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_input_destroy_urb [2022-11-21 23:03:15,836 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_input_destroy_urb [2022-11-21 23:03:15,836 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-21 23:03:15,836 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-21 23:03:15,852 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-21 23:03:15,852 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-11-21 23:03:15,852 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-11-21 23:03:15,853 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-11-21 23:03:15,853 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-11-21 23:03:15,853 INFO L130 BoogieDeclarations]: Found specification of procedure dev_close [2022-11-21 23:03:15,853 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_close [2022-11-21 23:03:15,853 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-11-21 23:03:15,853 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~VOID [2022-11-21 23:03:15,853 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-21 23:03:15,853 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-21 23:03:15,853 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-21 23:03:15,854 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2022-11-21 23:03:15,854 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2022-11-21 23:03:15,854 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_subscribe_event [2022-11-21 23:03:15,854 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_subscribe_event [2022-11-21 23:03:15,854 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-21 23:03:15,854 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_urbs [2022-11-21 23:03:15,854 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_urbs [2022-11-21 23:03:15,854 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-21 23:03:15,855 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_s_input [2022-11-21 23:03:15,855 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_s_input [2022-11-21 23:03:15,855 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-11-21 23:03:15,855 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-11-21 23:03:15,855 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-21 23:03:15,855 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-11-21 23:03:15,855 INFO L130 BoogieDeclarations]: Found specification of procedure try_fmt_vid_cap [2022-11-21 23:03:15,855 INFO L138 BoogieDeclarations]: Found implementation of procedure try_fmt_vid_cap [2022-11-21 23:03:15,855 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-11-21 23:03:15,856 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-11-21 23:03:15,856 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2022-11-21 23:03:15,856 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2022-11-21 23:03:15,856 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2022-11-21 23:03:15,856 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2022-11-21 23:03:15,856 INFO L130 BoogieDeclarations]: Found specification of procedure dev_open [2022-11-21 23:03:15,856 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_open [2022-11-21 23:03:15,856 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_vm_close [2022-11-21 23:03:15,857 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_vm_close [2022-11-21 23:03:15,857 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-11-21 23:03:15,857 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-11-21 23:03:15,857 INFO L130 BoogieDeclarations]: Found specification of procedure vidioc_qbuf [2022-11-21 23:03:15,857 INFO L138 BoogieDeclarations]: Found implementation of procedure vidioc_qbuf [2022-11-21 23:03:15,857 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-11-21 23:03:15,857 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-11-21 23:03:15,857 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_event_unsubscribe [2022-11-21 23:03:15,858 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_event_unsubscribe [2022-11-21 23:03:15,858 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-11-21 23:03:15,858 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-11-21 23:03:15,858 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-21 23:03:15,858 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~VOID [2022-11-21 23:03:15,858 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~VOID [2022-11-21 23:03:15,858 INFO L130 BoogieDeclarations]: Found specification of procedure gspca_vm_open [2022-11-21 23:03:15,858 INFO L138 BoogieDeclarations]: Found implementation of procedure gspca_vm_open [2022-11-21 23:03:15,858 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-21 23:03:15,859 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-21 23:03:16,715 INFO L235 CfgBuilder]: Building ICFG [2022-11-21 23:03:16,719 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-21 23:03:16,848 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-21 23:03:18,689 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-11-21 23:03:21,296 INFO L276 CfgBuilder]: Performing block encoding [2022-11-21 23:03:22,490 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-21 23:03:22,491 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-21 23:03:22,496 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 11:03:22 BoogieIcfgContainer [2022-11-21 23:03:22,496 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-21 23:03:22,497 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2022-11-21 23:03:22,497 INFO L271 PluginConnector]: Initializing CodeCheck... [2022-11-21 23:03:22,507 INFO L275 PluginConnector]: CodeCheck initialized [2022-11-21 23:03:22,508 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 11:03:22" (1/1) ... [2022-11-21 23:03:22,516 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 23:03:22,577 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:22,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1803 states to 1302 states and 1803 transitions. [2022-11-21 23:03:22,604 INFO L276 IsEmpty]: Start isEmpty. Operand 1302 states and 1803 transitions. [2022-11-21 23:03:22,622 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 260 [2022-11-21 23:03:22,623 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:22,623 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:23,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:23,634 INFO L134 CoverageAnalysis]: Checked inductivity of 3123 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:24,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:24,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1888 states to 1305 states and 1888 transitions. [2022-11-21 23:03:24,206 INFO L276 IsEmpty]: Start isEmpty. Operand 1305 states and 1888 transitions. [2022-11-21 23:03:24,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 260 [2022-11-21 23:03:24,217 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:24,217 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:24,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:24,741 INFO L134 CoverageAnalysis]: Checked inductivity of 3123 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:25,241 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:25,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1976 states to 1309 states and 1976 transitions. [2022-11-21 23:03:25,254 INFO L276 IsEmpty]: Start isEmpty. Operand 1309 states and 1976 transitions. [2022-11-21 23:03:25,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 264 [2022-11-21 23:03:25,278 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:25,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:25,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:25,727 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3125 trivial. 0 not checked. [2022-11-21 23:03:25,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:25,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1978 states to 1311 states and 1978 transitions. [2022-11-21 23:03:25,787 INFO L276 IsEmpty]: Start isEmpty. Operand 1311 states and 1978 transitions. [2022-11-21 23:03:25,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 263 [2022-11-21 23:03:25,797 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:25,799 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:25,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:26,269 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3125 trivial. 0 not checked. [2022-11-21 23:03:26,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:26,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1978 states to 1312 states and 1978 transitions. [2022-11-21 23:03:26,311 INFO L276 IsEmpty]: Start isEmpty. Operand 1312 states and 1978 transitions. [2022-11-21 23:03:26,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 265 [2022-11-21 23:03:26,318 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:26,318 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:26,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:26,750 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:27,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:27,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2069 states to 1317 states and 2069 transitions. [2022-11-21 23:03:27,272 INFO L276 IsEmpty]: Start isEmpty. Operand 1317 states and 2069 transitions. [2022-11-21 23:03:27,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 266 [2022-11-21 23:03:27,279 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:27,279 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:27,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:27,770 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3125 trivial. 0 not checked. [2022-11-21 23:03:27,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:27,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2076 states to 1320 states and 2076 transitions. [2022-11-21 23:03:27,892 INFO L276 IsEmpty]: Start isEmpty. Operand 1320 states and 2076 transitions. [2022-11-21 23:03:27,898 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 267 [2022-11-21 23:03:27,898 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:27,899 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:28,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:28,373 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3125 trivial. 0 not checked. [2022-11-21 23:03:28,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:28,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2079 states to 1322 states and 2079 transitions. [2022-11-21 23:03:28,423 INFO L276 IsEmpty]: Start isEmpty. Operand 1322 states and 2079 transitions. [2022-11-21 23:03:28,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 266 [2022-11-21 23:03:28,429 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:28,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:28,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:28,863 INFO L134 CoverageAnalysis]: Checked inductivity of 3126 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3126 trivial. 0 not checked. [2022-11-21 23:03:28,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:28,934 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2085 states to 1325 states and 2085 transitions. [2022-11-21 23:03:28,934 INFO L276 IsEmpty]: Start isEmpty. Operand 1325 states and 2085 transitions. [2022-11-21 23:03:28,938 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 267 [2022-11-21 23:03:28,938 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:28,938 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:29,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:29,314 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3125 trivial. 0 not checked. [2022-11-21 23:03:29,356 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:29,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2090 states to 1328 states and 2090 transitions. [2022-11-21 23:03:29,363 INFO L276 IsEmpty]: Start isEmpty. Operand 1328 states and 2090 transitions. [2022-11-21 23:03:29,367 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 267 [2022-11-21 23:03:29,367 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:29,368 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:29,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:29,700 INFO L134 CoverageAnalysis]: Checked inductivity of 3126 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3126 trivial. 0 not checked. [2022-11-21 23:03:29,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:29,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2093 states to 1330 states and 2093 transitions. [2022-11-21 23:03:29,739 INFO L276 IsEmpty]: Start isEmpty. Operand 1330 states and 2093 transitions. [2022-11-21 23:03:29,743 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 268 [2022-11-21 23:03:29,743 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:29,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:29,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:30,087 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:30,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:30,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2088 states to 1329 states and 2088 transitions. [2022-11-21 23:03:30,149 INFO L276 IsEmpty]: Start isEmpty. Operand 1329 states and 2088 transitions. [2022-11-21 23:03:30,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 267 [2022-11-21 23:03:30,153 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:30,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:30,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:30,486 INFO L134 CoverageAnalysis]: Checked inductivity of 3126 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3126 trivial. 0 not checked. [2022-11-21 23:03:30,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:30,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2093 states to 1332 states and 2093 transitions. [2022-11-21 23:03:30,537 INFO L276 IsEmpty]: Start isEmpty. Operand 1332 states and 2093 transitions. [2022-11-21 23:03:30,541 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 268 [2022-11-21 23:03:30,541 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:30,542 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:30,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:30,882 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:30,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:30,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2099 states to 1335 states and 2099 transitions. [2022-11-21 23:03:30,928 INFO L276 IsEmpty]: Start isEmpty. Operand 1335 states and 2099 transitions. [2022-11-21 23:03:30,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 268 [2022-11-21 23:03:30,932 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:30,932 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:31,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:31,288 INFO L134 CoverageAnalysis]: Checked inductivity of 3130 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 3125 trivial. 0 not checked. [2022-11-21 23:03:31,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:31,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2099 states to 1336 states and 2099 transitions. [2022-11-21 23:03:31,334 INFO L276 IsEmpty]: Start isEmpty. Operand 1336 states and 2099 transitions. [2022-11-21 23:03:31,338 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 269 [2022-11-21 23:03:31,338 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:31,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:31,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:31,691 INFO L134 CoverageAnalysis]: Checked inductivity of 3130 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3126 trivial. 0 not checked. [2022-11-21 23:03:31,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:31,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2099 states to 1337 states and 2099 transitions. [2022-11-21 23:03:31,734 INFO L276 IsEmpty]: Start isEmpty. Operand 1337 states and 2099 transitions. [2022-11-21 23:03:31,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 269 [2022-11-21 23:03:31,738 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:31,739 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:31,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:32,087 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:32,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:32,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2166 states to 1344 states and 2166 transitions. [2022-11-21 23:03:32,629 INFO L276 IsEmpty]: Start isEmpty. Operand 1344 states and 2166 transitions. [2022-11-21 23:03:32,634 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 269 [2022-11-21 23:03:32,634 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:32,634 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:32,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:32,934 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:33,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:33,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2228 states to 1350 states and 2228 transitions. [2022-11-21 23:03:33,448 INFO L276 IsEmpty]: Start isEmpty. Operand 1350 states and 2228 transitions. [2022-11-21 23:03:33,452 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 269 [2022-11-21 23:03:33,452 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:33,453 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:33,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:33,751 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:33,822 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:33,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2221 states to 1349 states and 2221 transitions. [2022-11-21 23:03:33,828 INFO L276 IsEmpty]: Start isEmpty. Operand 1349 states and 2221 transitions. [2022-11-21 23:03:33,832 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 270 [2022-11-21 23:03:33,832 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:33,832 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:33,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:34,348 INFO L134 CoverageAnalysis]: Checked inductivity of 3125 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:34,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:34,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2220 states to 1349 states and 2220 transitions. [2022-11-21 23:03:34,439 INFO L276 IsEmpty]: Start isEmpty. Operand 1349 states and 2220 transitions. [2022-11-21 23:03:34,445 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 271 [2022-11-21 23:03:34,445 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:34,450 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:34,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:34,914 INFO L134 CoverageAnalysis]: Checked inductivity of 3131 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3127 trivial. 0 not checked. [2022-11-21 23:03:35,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:35,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2223 states to 1351 states and 2223 transitions. [2022-11-21 23:03:35,190 INFO L276 IsEmpty]: Start isEmpty. Operand 1351 states and 2223 transitions. [2022-11-21 23:03:35,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 272 [2022-11-21 23:03:35,195 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:35,196 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:35,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:35,527 INFO L134 CoverageAnalysis]: Checked inductivity of 3131 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3127 trivial. 0 not checked. [2022-11-21 23:03:35,644 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:35,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2226 states to 1353 states and 2226 transitions. [2022-11-21 23:03:35,651 INFO L276 IsEmpty]: Start isEmpty. Operand 1353 states and 2226 transitions. [2022-11-21 23:03:35,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 272 [2022-11-21 23:03:35,653 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:35,654 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:35,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:35,974 INFO L134 CoverageAnalysis]: Checked inductivity of 3132 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 3123 trivial. 0 not checked. [2022-11-21 23:03:36,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:36,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2320 states to 1359 states and 2320 transitions. [2022-11-21 23:03:36,941 INFO L276 IsEmpty]: Start isEmpty. Operand 1359 states and 2320 transitions. [2022-11-21 23:03:36,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 272 [2022-11-21 23:03:36,944 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:36,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:37,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:37,275 INFO L134 CoverageAnalysis]: Checked inductivity of 3130 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 3125 trivial. 0 not checked. [2022-11-21 23:03:37,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:37,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2320 states to 1360 states and 2320 transitions. [2022-11-21 23:03:37,336 INFO L276 IsEmpty]: Start isEmpty. Operand 1360 states and 2320 transitions. [2022-11-21 23:03:37,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 272 [2022-11-21 23:03:37,339 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:37,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:37,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:37,628 INFO L134 CoverageAnalysis]: Checked inductivity of 3130 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 3125 trivial. 0 not checked. [2022-11-21 23:03:37,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:37,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2320 states to 1361 states and 2320 transitions. [2022-11-21 23:03:37,670 INFO L276 IsEmpty]: Start isEmpty. Operand 1361 states and 2320 transitions. [2022-11-21 23:03:37,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 273 [2022-11-21 23:03:37,673 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:37,673 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:37,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:37,950 INFO L134 CoverageAnalysis]: Checked inductivity of 3130 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3126 trivial. 0 not checked. [2022-11-21 23:03:37,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:37,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2320 states to 1362 states and 2320 transitions. [2022-11-21 23:03:37,998 INFO L276 IsEmpty]: Start isEmpty. Operand 1362 states and 2320 transitions. [2022-11-21 23:03:38,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 273 [2022-11-21 23:03:38,001 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:38,001 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:38,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:38,276 INFO L134 CoverageAnalysis]: Checked inductivity of 3130 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3126 trivial. 0 not checked. [2022-11-21 23:03:38,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:38,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2320 states to 1363 states and 2320 transitions. [2022-11-21 23:03:38,316 INFO L276 IsEmpty]: Start isEmpty. Operand 1363 states and 2320 transitions. [2022-11-21 23:03:38,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 273 [2022-11-21 23:03:38,318 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:38,318 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:38,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:38,598 INFO L134 CoverageAnalysis]: Checked inductivity of 3131 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3131 trivial. 0 not checked. [2022-11-21 23:03:38,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:38,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2322 states to 1364 states and 2322 transitions. [2022-11-21 23:03:38,793 INFO L276 IsEmpty]: Start isEmpty. Operand 1364 states and 2322 transitions. [2022-11-21 23:03:38,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 273 [2022-11-21 23:03:38,797 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:38,798 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:38,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:39,070 INFO L134 CoverageAnalysis]: Checked inductivity of 3133 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3133 trivial. 0 not checked. [2022-11-21 23:03:39,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:39,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2323 states to 1365 states and 2323 transitions. [2022-11-21 23:03:39,183 INFO L276 IsEmpty]: Start isEmpty. Operand 1365 states and 2323 transitions. [2022-11-21 23:03:39,185 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 274 [2022-11-21 23:03:39,186 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:39,186 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:39,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:39,488 INFO L134 CoverageAnalysis]: Checked inductivity of 3134 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3134 trivial. 0 not checked. [2022-11-21 23:03:39,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:39,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2323 states to 1366 states and 2323 transitions. [2022-11-21 23:03:39,532 INFO L276 IsEmpty]: Start isEmpty. Operand 1366 states and 2323 transitions. [2022-11-21 23:03:39,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 275 [2022-11-21 23:03:39,535 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:39,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:39,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:39,840 INFO L134 CoverageAnalysis]: Checked inductivity of 3132 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2022-11-21 23:03:39,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:39,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2323 states to 1367 states and 2323 transitions. [2022-11-21 23:03:39,960 INFO L276 IsEmpty]: Start isEmpty. Operand 1367 states and 2323 transitions. [2022-11-21 23:03:39,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 274 [2022-11-21 23:03:39,962 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:39,963 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:40,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:40,280 INFO L134 CoverageAnalysis]: Checked inductivity of 3136 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3136 trivial. 0 not checked. [2022-11-21 23:03:40,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:40,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2323 states to 1368 states and 2323 transitions. [2022-11-21 23:03:40,320 INFO L276 IsEmpty]: Start isEmpty. Operand 1368 states and 2323 transitions. [2022-11-21 23:03:40,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 275 [2022-11-21 23:03:40,322 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:40,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:40,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:40,640 INFO L134 CoverageAnalysis]: Checked inductivity of 3133 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3129 trivial. 0 not checked. [2022-11-21 23:03:40,681 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:40,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2323 states to 1369 states and 2323 transitions. [2022-11-21 23:03:40,686 INFO L276 IsEmpty]: Start isEmpty. Operand 1369 states and 2323 transitions. [2022-11-21 23:03:40,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 276 [2022-11-21 23:03:40,689 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:40,689 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:40,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:40,951 INFO L134 CoverageAnalysis]: Checked inductivity of 3132 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3128 trivial. 0 not checked. [2022-11-21 23:03:40,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:40,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2325 states to 1371 states and 2325 transitions. [2022-11-21 23:03:40,992 INFO L276 IsEmpty]: Start isEmpty. Operand 1371 states and 2325 transitions. [2022-11-21 23:03:40,994 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 276 [2022-11-21 23:03:40,994 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:40,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:41,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:41,270 INFO L134 CoverageAnalysis]: Checked inductivity of 3131 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3127 trivial. 0 not checked. [2022-11-21 23:03:41,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:41,314 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2328 states to 1374 states and 2328 transitions. [2022-11-21 23:03:41,314 INFO L276 IsEmpty]: Start isEmpty. Operand 1374 states and 2328 transitions. [2022-11-21 23:03:41,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 276 [2022-11-21 23:03:41,316 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:41,316 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:41,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:41,587 INFO L134 CoverageAnalysis]: Checked inductivity of 3131 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 3127 trivial. 0 not checked. [2022-11-21 23:03:41,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:41,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2331 states to 1377 states and 2331 transitions. [2022-11-21 23:03:41,630 INFO L276 IsEmpty]: Start isEmpty. Operand 1377 states and 2331 transitions. [2022-11-21 23:03:41,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 318 [2022-11-21 23:03:41,632 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:41,632 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:41,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:42,083 INFO L134 CoverageAnalysis]: Checked inductivity of 4517 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 4515 trivial. 0 not checked. [2022-11-21 23:03:42,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:42,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2420 states to 1382 states and 2410 transitions. [2022-11-21 23:03:42,728 INFO L276 IsEmpty]: Start isEmpty. Operand 1382 states and 2410 transitions. [2022-11-21 23:03:42,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 318 [2022-11-21 23:03:42,732 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:42,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:42,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:43,305 INFO L134 CoverageAnalysis]: Checked inductivity of 4518 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4518 trivial. 0 not checked. [2022-11-21 23:03:44,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:44,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2619 states to 1416 states and 2608 transitions. [2022-11-21 23:03:44,763 INFO L276 IsEmpty]: Start isEmpty. Operand 1416 states and 2608 transitions. [2022-11-21 23:03:44,765 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 319 [2022-11-21 23:03:44,766 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:44,766 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:44,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:45,701 INFO L134 CoverageAnalysis]: Checked inductivity of 4517 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4515 trivial. 0 not checked. [2022-11-21 23:03:45,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:45,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2622 states to 1418 states and 2611 transitions. [2022-11-21 23:03:45,898 INFO L276 IsEmpty]: Start isEmpty. Operand 1418 states and 2611 transitions. [2022-11-21 23:03:45,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 321 [2022-11-21 23:03:45,900 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:45,901 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:46,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:46,921 INFO L134 CoverageAnalysis]: Checked inductivity of 4522 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 4516 trivial. 0 not checked. [2022-11-21 23:03:47,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:47,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2624 states to 1419 states and 2613 transitions. [2022-11-21 23:03:47,253 INFO L276 IsEmpty]: Start isEmpty. Operand 1419 states and 2613 transitions. [2022-11-21 23:03:47,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 323 [2022-11-21 23:03:47,256 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:47,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:47,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:48,375 INFO L134 CoverageAnalysis]: Checked inductivity of 4531 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 4518 trivial. 0 not checked. [2022-11-21 23:03:48,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:48,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2625 states to 1420 states and 2614 transitions. [2022-11-21 23:03:48,755 INFO L276 IsEmpty]: Start isEmpty. Operand 1420 states and 2614 transitions. [2022-11-21 23:03:48,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 325 [2022-11-21 23:03:48,757 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:48,757 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:48,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 23:03:50,021 INFO L134 CoverageAnalysis]: Checked inductivity of 4544 backedges. 0 proven. 23 refuted. 0 times theorem prover too weak. 4521 trivial. 0 not checked. [2022-11-21 23:03:50,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2022-11-21 23:03:50,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2626 states to 1421 states and 2615 transitions. [2022-11-21 23:03:50,559 INFO L276 IsEmpty]: Start isEmpty. Operand 1421 states and 2615 transitions. [2022-11-21 23:03:50,561 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 327 [2022-11-21 23:03:50,561 INFO L422 CodeCheckObserver]: Error Path is FOUND. [2022-11-21 23:03:50,561 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 23:03:50,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-21 23:03:50,897 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-21 23:03:51,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-21 23:03:53,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-21 23:03:53,185 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-21 23:03:53,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-21 23:03:54,707 WARN L475 CodeCheckObserver]: This program is UNSAFE, Check terminated with 42 iterations. [2022-11-21 23:03:54,812 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-21 23:03:54,815 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-21 23:03:55,297 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck CFG 21.11 11:03:55 ImpRootNode [2022-11-21 23:03:55,297 INFO L132 PluginConnector]: ------------------------ END CodeCheck---------------------------- [2022-11-21 23:03:55,303 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-21 23:03:55,303 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-21 23:03:55,304 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-21 23:03:55,305 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 11:03:22" (3/4) ... [2022-11-21 23:03:55,307 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2022-11-21 23:03:55,376 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-21 23:03:55,378 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-21 23:03:55,833 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/witness.graphml [2022-11-21 23:03:55,834 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-21 23:03:55,834 INFO L158 Benchmark]: Toolchain (without parser) took 43875.36ms. Allocated memory was 178.3MB in the beginning and 1.1GB in the end (delta: 901.8MB). Free memory was 138.5MB in the beginning and 537.5MB in the end (delta: -399.0MB). Peak memory consumption was 502.4MB. Max. memory is 16.1GB. [2022-11-21 23:03:55,835 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 134.2MB. Free memory is still 108.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-21 23:03:55,835 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3137.23ms. Allocated memory was 178.3MB in the beginning and 224.4MB in the end (delta: 46.1MB). Free memory was 138.5MB in the beginning and 144.3MB in the end (delta: -5.8MB). Peak memory consumption was 107.1MB. Max. memory is 16.1GB. [2022-11-21 23:03:55,836 INFO L158 Benchmark]: Boogie Procedure Inliner took 227.05ms. Allocated memory is still 224.4MB. Free memory was 144.3MB in the beginning and 117.0MB in the end (delta: 27.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-21 23:03:55,836 INFO L158 Benchmark]: Boogie Preprocessor took 350.36ms. Allocated memory is still 224.4MB. Free memory was 117.0MB in the beginning and 87.6MB in the end (delta: 29.4MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. [2022-11-21 23:03:55,836 INFO L158 Benchmark]: RCFGBuilder took 6818.72ms. Allocated memory was 224.4MB in the beginning and 408.9MB in the end (delta: 184.5MB). Free memory was 87.6MB in the beginning and 183.4MB in the end (delta: -95.8MB). Peak memory consumption was 115.6MB. Max. memory is 16.1GB. [2022-11-21 23:03:55,837 INFO L158 Benchmark]: CodeCheck took 32800.55ms. Allocated memory was 408.9MB in the beginning and 1.1GB in the end (delta: 671.1MB). Free memory was 182.4MB in the beginning and 748.0MB in the end (delta: -565.6MB). Peak memory consumption was 529.9MB. Max. memory is 16.1GB. [2022-11-21 23:03:55,837 INFO L158 Benchmark]: Witness Printer took 530.92ms. Allocated memory is still 1.1GB. Free memory was 748.0MB in the beginning and 537.5MB in the end (delta: 210.5MB). Peak memory consumption was 209.7MB. Max. memory is 16.1GB. [2022-11-21 23:03:55,839 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - StatisticsResult: Ultimate CodeCheck benchmark data CFG has 83 procedures, 1304 locations, 98 error locations. Started 1 CEGAR loops. OverallTime: 32.2s, OverallIterations: 42, TraceHistogramMax: 0, PathProgramHistogramMax: 0, EmptinessCheckTime: 0.0s, AutomataDifference: 0.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 25897 SdHoareTripleChecker+Valid, 74.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 6034 mSDsluCounter, 40097 SdHoareTripleChecker+Invalid, 69.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 30763 mSDsCounter, 2120 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 12924 IncrementalHoareTripleChecker+Invalid, 15044 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2120 mSolverCounterUnsat, 9334 mSDtfsCounter, 12924 mSolverCounterSat, 0.9s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 59346 GetRequests, 59212 SyntacticMatches, 8 SemanticMatches, 126 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6991 ImplicationChecksByTransitivity, 5.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=-1occurred in iteration=-1, InterpolantAutomatonStates: 0, traceCheckStatistics: 1.1s SsaConstructionTime, 4.1s SatisfiabilityAnalysisTime, 12.9s InterpolantComputationTime, 11648 NumberOfCodeBlocks, 11648 NumberOfCodeBlocksAsserted, 42 NumberOfCheckSat, 11281 ConstructedInterpolants, 0 QuantifiedInterpolants, 12155 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 41 InterpolantComputations, 37 PerfectInterpolantSequences, 136596/136640 InterpolantCoveringCapability, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: No data available, ReuseStatistics: No data available - CounterExampleResult [Line: 5489]: integer overflow possible integer overflow possible We found a FailurePath: [L5320] struct v4l2_buffer *dev_ioctl_ops_group4 ; [L5321] struct v4l2_fh *dev_ioctl_ops_group5 ; [L5322] struct file *dev_fops_group0 ; [L5323] int LDV_IN_INTERRUPT = 1; [L5324] struct v4l2_event_subscription *dev_ioctl_ops_group1 ; [L5325] struct vm_area_struct *gspca_vm_ops_group0 ; [L5326] int ldv_state_variable_0 ; [L5327] int ldv_state_variable_3 ; [L5328] int ldv_state_variable_2 ; [L5329] int ref_cnt ; [L5330] struct v4l2_streamparm *dev_ioctl_ops_group2 ; [L5331] struct file *dev_ioctl_ops_group3 ; [L5332] int ldv_state_variable_1 ; [L5333] int ldv_state_variable_4 ; [L5334] struct v4l2_format *dev_ioctl_ops_group0 ; [L5438] int gspca_debug ; [L5507-L5508] static struct vm_operations_struct const gspca_vm_ops = {& gspca_vm_open, & gspca_vm_close, 0, 0, 0, 0, 0, 0, 0}; [L7817-L7819] static struct v4l2_file_operations dev_fops = {& __this_module, & dev_read, 0, & dev_poll, 0, & video_ioctl2, 0, 0, & dev_mmap, & dev_open, & dev_close}; [L7820-L7830] static struct v4l2_ioctl_ops const dev_ioctl_ops = {& vidioc_querycap, 0, 0, & vidioc_enum_fmt_vid_cap, 0, 0, 0, 0, & vidioc_g_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_s_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_try_fmt_vid_cap, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_reqbufs, & vidioc_querybuf, & vidioc_qbuf, 0, & vidioc_dqbuf, 0, 0, 0, 0, 0, & vidioc_streamon, & vidioc_streamoff, 0, 0, 0, & vidioc_enum_input, & vidioc_g_input, & vidioc_s_input, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_g_jpegcomp, & vidioc_s_jpegcomp, 0, 0, 0, 0, 0, & vidioc_g_parm, & vidioc_s_parm, 0, 0, 0, 0, 0, 0, 0, 0, & vidioc_g_register, & vidioc_s_register, & vidioc_g_chip_info, & vidioc_enum_framesizes, & vidioc_enum_frameintervals, 0, 0, 0, 0, 0, & v4l2_ctrl_subscribe_event, & v4l2_event_unsubscribe, 0}; [L7831-L7904] static struct video_device const gspca_template = {{{0, 0}, 0, 0U, 0, 0U, 0U, 0UL, 0U, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned short)0, 0, 0, 0, 0, 0, 0, {.alsa = {0U, 0U, 0U}}}, (struct v4l2_file_operations const *)(& dev_fops), {0, 0, {0, {0, 0}, 0, 0, 0, 0, {{0}}, {{{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, {0, {0, 0}, 0, 0, 0UL}}, 0, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0}, 0, 0, {{0}, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0, 0, {0, {0, 0}, 0, 0, 0UL}}, 0, 0, 0, {{0}, (unsigned char)0, (unsigned char)0, (_Bool)0, (_Bool)0, (_Bool)0, (_Bool)0, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0U, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}, 0, (_Bool)0, (_Bool)0, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, {0, {0, 0}, 0, 0, 0UL}}, 0UL, {{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {0}, {0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0, 0, 0, 0, 0UL, 0UL, 0UL, 0UL, 0, 0}, 0, 0, 0, 0ULL, 0, {0, 0}, 0, {0, 0}, 0, {0}, 0U, 0U, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0, {0, 0}, {{0}}}, 0, 0, 0, 0, (_Bool)0, (_Bool)0}, 0, 0, 0, 0, 0, 0, {'g', 's', 'p', 'c', 'a', ' ', 'm', 'a', 'i', 'n', ' ', 'd', 'r', 'i', 'v', 'e', 'r', '\000'}, 0, 0, 0, (unsigned short)0, 0UL, 0, {{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0ULL, & video_device_release_empty, & dev_ioctl_ops, {0UL, 0UL, 0UL}, {0UL, 0UL, 0UL}, 0}; [L8183] int ldv_retval_0 ; [L8185] int ldv_retval_1 ; [L9098] int INTERF_STATE = 0; [L9099] int SERIAL_STATE = 0; [L9100] void *usb_intfdata = 0; [L9101] struct urb *usb_urb = 0; [L9102] struct usb_device *usb_dev = 0; [L9103] int dev_counter = 0; [L9104] int completeFnIntCounter = 0; [L9105] int completeFnBulkCounter = 0; [L9106] void (*completeFnInt)(struct urb * ) ; [L9107] void (*completeFnBulk)(struct urb * ) ; [L8232] struct video_device *ldvarg0 ; [L8233] void *tmp ; [L8234] unsigned long ldvarg1 ; [L8235] unsigned long tmp___0 ; [L8236] struct vm_area_struct *ldvarg7 ; [L8237] void *tmp___1 ; [L8238] loff_t *ldvarg4 ; [L8239] void *tmp___2 ; [L8240] struct poll_table_struct *ldvarg3 ; [L8241] void *tmp___3 ; [L8242] size_t ldvarg5 ; [L8243] size_t tmp___4 ; [L8244] unsigned int ldvarg2 ; [L8245] unsigned int tmp___5 ; [L8246] char *ldvarg6 ; [L8247] void *tmp___6 ; [L8248] struct v4l2_jpegcompression *ldvarg18 ; [L8249] void *tmp___7 ; [L8250] void *ldvarg11 ; [L8251] void *tmp___8 ; [L8252] void *ldvarg32 ; [L8253] void *tmp___9 ; [L8254] void *ldvarg23 ; [L8255] void *tmp___10 ; [L8256] void *ldvarg43 ; [L8257] void *tmp___11 ; [L8258] void *ldvarg42 ; [L8259] void *tmp___12 ; [L8260] unsigned int ldvarg12 ; [L8261] unsigned int tmp___13 ; [L8262] struct v4l2_fmtdesc *ldvarg37 ; [L8263] void *tmp___14 ; [L8264] void *ldvarg29 ; [L8265] void *tmp___15 ; [L8266] struct v4l2_requestbuffers *ldvarg44 ; [L8267] void *tmp___16 ; [L8268] struct v4l2_frmivalenum *ldvarg24 ; [L8269] void *tmp___17 ; [L8270] void *ldvarg35 ; [L8271] void *tmp___18 ; [L8272] void *ldvarg38 ; [L8273] void *tmp___19 ; [L8274] void *ldvarg33 ; [L8275] void *tmp___20 ; [L8276] void *ldvarg16 ; [L8277] void *tmp___21 ; [L8278] void *ldvarg14 ; [L8279] void *tmp___22 ; [L8280] struct v4l2_dbg_chip_info *ldvarg34 ; [L8281] void *tmp___23 ; [L8282] struct v4l2_frmsizeenum *ldvarg28 ; [L8283] void *tmp___24 ; [L8284] enum v4l2_buf_type ldvarg39 ; [L8285] struct v4l2_jpegcompression *ldvarg20 ; [L8286] void *tmp___25 ; [L8287] unsigned int *ldvarg31 ; [L8288] void *tmp___26 ; [L8289] void *ldvarg41 ; [L8290] void *tmp___27 ; [L8291] enum v4l2_buf_type ldvarg8 ; [L8292] void *ldvarg13 ; [L8293] void *tmp___28 ; [L8294] struct v4l2_dbg_register *ldvarg10 ; [L8295] void *tmp___29 ; [L8296] void *ldvarg36 ; [L8297] void *tmp___30 ; [L8298] void *ldvarg40 ; [L8299] void *tmp___31 ; [L8300] void *ldvarg9 ; [L8301] void *tmp___32 ; [L8302] void *ldvarg45 ; [L8303] void *tmp___33 ; [L8304] struct v4l2_capability *ldvarg26 ; [L8305] void *tmp___34 ; [L8306] void *ldvarg27 ; [L8307] void *tmp___35 ; [L8308] struct v4l2_input *ldvarg15 ; [L8309] void *tmp___36 ; [L8310] void *ldvarg30 ; [L8311] void *tmp___37 ; [L8312] void *ldvarg21 ; [L8313] void *tmp___38 ; [L8314] void *ldvarg17 ; [L8315] void *tmp___39 ; [L8316] void *ldvarg25 ; [L8317] void *tmp___40 ; [L8318] struct v4l2_dbg_register *ldvarg22 ; [L8319] void *tmp___41 ; [L8320] void *ldvarg19 ; [L8321] void *tmp___42 ; [L8322] int tmp___43 ; [L8323] int tmp___44 ; [L8324] int tmp___45 ; [L8325] int tmp___46 ; [L8326] int tmp___47 ; [L8327] int tmp___48 ; VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg39={90:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] CALL, EXPR ldv_zalloc(1800UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1800, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1800, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] RET, EXPR ldv_zalloc(1800UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1800UL)={0:0}, ldvarg39={90:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8329] tmp = ldv_zalloc(1800UL) [L8330] ldvarg0 = (struct video_device *)tmp [L8331] tmp___0 = __VERIFIER_nondet_ulong() [L8332] ldvarg1 = tmp___0 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg39={90:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] CALL, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] RET, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(184UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg39={90:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8333] tmp___1 = ldv_zalloc(184UL) [L8334] ldvarg7 = (struct vm_area_struct *)tmp___1 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg39={90:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] CALL, EXPR ldv_zalloc(8UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=8, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=8, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] RET, EXPR ldv_zalloc(8UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(8UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg39={90:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8335] tmp___2 = ldv_zalloc(8UL) [L8336] ldvarg4 = (loff_t *)tmp___2 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] CALL, EXPR ldv_zalloc(16UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=16, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=16, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] RET, EXPR ldv_zalloc(16UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(16UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8337] tmp___3 = ldv_zalloc(16UL) [L8338] ldvarg3 = (struct poll_table_struct *)tmp___3 [L8339] tmp___4 = __VERIFIER_nondet_size_t() [L8340] ldvarg5 = tmp___4 [L8341] tmp___5 = __VERIFIER_nondet_uint() [L8342] ldvarg2 = tmp___5 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg2=647, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg2=647, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8343] tmp___6 = ldv_zalloc(1UL) [L8344] ldvarg6 = (char *)tmp___6 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg2=647, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] CALL, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=140, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=140, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] RET, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(140UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg2=647, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8345] tmp___7 = ldv_zalloc(140UL) [L8346] ldvarg18 = (struct v4l2_jpegcompression *)tmp___7 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg18={0:0}, ldvarg2=647, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg18={0:0}, ldvarg2=647, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8347] tmp___8 = ldv_zalloc(1UL) [L8348] ldvarg11 = tmp___8 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg3={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8349] tmp___9 = ldv_zalloc(1UL) [L8350] ldvarg32 = tmp___9 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8351] tmp___10 = ldv_zalloc(1UL) [L8352] ldvarg23 = tmp___10 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8353] tmp___11 = ldv_zalloc(1UL) [L8354] ldvarg43 = tmp___11 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg43={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg43={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8355] tmp___12 = ldv_zalloc(1UL) [L8356] ldvarg42 = tmp___12 [L8357] tmp___13 = __VERIFIER_nondet_uint() [L8358] ldvarg12 = tmp___13 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] CALL, EXPR ldv_zalloc(64UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=64, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=64, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] RET, EXPR ldv_zalloc(64UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(64UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] tmp___14 = ldv_zalloc(64UL) [L8360] ldvarg37 = (struct v4l2_fmtdesc *)tmp___14 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] tmp___15 = ldv_zalloc(1UL) [L8362] ldvarg29 = tmp___15 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] CALL, EXPR ldv_zalloc(20UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=20, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=20, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] RET, EXPR ldv_zalloc(20UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(20UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8363] tmp___16 = ldv_zalloc(20UL) [L8364] ldvarg44 = (struct v4l2_requestbuffers *)tmp___16 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] CALL, EXPR ldv_zalloc(52UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=52, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=52, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] RET, EXPR ldv_zalloc(52UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(52UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] tmp___17 = ldv_zalloc(52UL) [L8366] ldvarg24 = (struct v4l2_frmivalenum *)tmp___17 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8367] tmp___18 = ldv_zalloc(1UL) [L8368] ldvarg35 = tmp___18 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8369] tmp___19 = ldv_zalloc(1UL) [L8370] ldvarg38 = tmp___19 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8371] tmp___20 = ldv_zalloc(1UL) [L8372] ldvarg33 = tmp___20 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8373] tmp___21 = ldv_zalloc(1UL) [L8374] ldvarg16 = tmp___21 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8375] tmp___22 = ldv_zalloc(1UL) [L8376] ldvarg14 = tmp___22 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] CALL, EXPR ldv_zalloc(200UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=200, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=200, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] RET, EXPR ldv_zalloc(200UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(200UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8377] tmp___23 = ldv_zalloc(200UL) [L8378] ldvarg34 = (struct v4l2_dbg_chip_info *)tmp___23 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] CALL, EXPR ldv_zalloc(44UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=44, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=44, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] RET, EXPR ldv_zalloc(44UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(44UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8379] tmp___24 = ldv_zalloc(44UL) [L8380] ldvarg28 = (struct v4l2_frmsizeenum *)tmp___24 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] CALL, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=140, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=140, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] RET, EXPR ldv_zalloc(140UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(140UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8381] tmp___25 = ldv_zalloc(140UL) [L8382] ldvarg20 = (struct v4l2_jpegcompression *)tmp___25 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8383] tmp___26 = ldv_zalloc(4UL) [L8384] ldvarg31 = (unsigned int *)tmp___26 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8385] tmp___27 = ldv_zalloc(1UL) [L8386] ldvarg41 = tmp___27 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8387] tmp___28 = ldv_zalloc(1UL) [L8388] ldvarg13 = tmp___28 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] CALL, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=56, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=56, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] RET, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(56UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8389] tmp___29 = ldv_zalloc(56UL) [L8390] ldvarg10 = (struct v4l2_dbg_register *)tmp___29 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8391] tmp___30 = ldv_zalloc(1UL) [L8392] ldvarg36 = tmp___30 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8393] tmp___31 = ldv_zalloc(1UL) [L8394] ldvarg40 = tmp___31 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8395] tmp___32 = ldv_zalloc(1UL) [L8396] ldvarg9 = tmp___32 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8397] tmp___33 = ldv_zalloc(1UL) [L8398] ldvarg45 = tmp___33 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] CALL, EXPR ldv_zalloc(104UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=104, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=104, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] RET, EXPR ldv_zalloc(104UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(104UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8399] tmp___34 = ldv_zalloc(104UL) [L8400] ldvarg26 = (struct v4l2_capability *)tmp___34 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8401] tmp___35 = ldv_zalloc(1UL) [L8402] ldvarg27 = tmp___35 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] CALL, EXPR ldv_zalloc(80UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=80, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=80, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] RET, EXPR ldv_zalloc(80UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(80UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8403] tmp___36 = ldv_zalloc(80UL) [L8404] ldvarg15 = (struct v4l2_input *)tmp___36 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8405] tmp___37 = ldv_zalloc(1UL) [L8406] ldvarg30 = tmp___37 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8407] tmp___38 = ldv_zalloc(1UL) [L8408] ldvarg21 = tmp___38 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8409] tmp___39 = ldv_zalloc(1UL) [L8410] ldvarg17 = tmp___39 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8411] tmp___40 = ldv_zalloc(1UL) [L8412] ldvarg25 = tmp___40 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] CALL, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=56, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=56, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] RET, EXPR ldv_zalloc(56UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(56UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8413] tmp___41 = ldv_zalloc(56UL) [L8414] ldvarg22 = (struct v4l2_dbg_register *)tmp___41 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8415] tmp___42 = ldv_zalloc(1UL) [L8416] ldvarg19 = tmp___42 [L8417] FCALL ldv_initialize() [L8418] FCALL memset((void *)(& ldvarg39), 0, 4UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, memset((void *)(& ldvarg39), 0, 4UL)={90:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8419] FCALL memset((void *)(& ldvarg8), 0, 4UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, memset((void *)(& ldvarg8), 0, 4UL)={91:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8420] ldv_state_variable_4 = 0 [L8421] ldv_state_variable_1 = 0 [L8422] ref_cnt = 0 [L8423] ldv_state_variable_0 = 1 [L8424] ldv_state_variable_3 = 0 [L8425] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8427] tmp___43 = __VERIFIER_nondet_int() [L8429] case 0: [L8455] case 1: [L8482] case 2: VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8483] COND TRUE ldv_state_variable_0 != 0 [L8484] tmp___46 = __VERIFIER_nondet_int() [L8486] case 0: [L8494] case 1: VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___46=1, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8495] COND TRUE ldv_state_variable_0 == 1 [L8496] CALL, EXPR gspca_init() [L8174] return (0); [L8496] RET, EXPR gspca_init() [L8496] ldv_retval_0 = gspca_init() [L8497] COND TRUE ldv_retval_0 == 0 [L8498] ldv_state_variable_0 = 3 [L8499] ldv_state_variable_2 = 1 [L8500] CALL ldv_initialize_v4l2_ioctl_ops_2() [L8208] void *tmp ; [L8209] void *tmp___0 ; [L8210] void *tmp___1 ; [L8211] void *tmp___2 ; [L8212] void *tmp___3 ; [L8213] void *tmp___4 ; VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] CALL, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=360, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=360, tmp___0=1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] RET, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(360UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8215] tmp = ldv_zalloc(360UL) [L8216] dev_ioctl_ops_group3 = (struct file *)tmp VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] CALL, EXPR ldv_zalloc(208UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=208, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=208, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] RET, EXPR ldv_zalloc(208UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(208UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8217] tmp___0 = ldv_zalloc(208UL) [L8218] dev_ioctl_ops_group0 = (struct v4l2_format *)tmp___0 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8219] tmp___1 = ldv_zalloc(32UL) [L8220] dev_ioctl_ops_group1 = (struct v4l2_event_subscription *)tmp___1 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] CALL, EXPR ldv_zalloc(168UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=168, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=168, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] RET, EXPR ldv_zalloc(168UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(168UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8221] tmp___2 = ldv_zalloc(168UL) [L8222] dev_ioctl_ops_group5 = (struct v4l2_fh *)tmp___2 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] CALL, EXPR ldv_zalloc(88UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=88, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=88, tmp___0=-1, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] RET, EXPR ldv_zalloc(88UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(88UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8223] tmp___3 = ldv_zalloc(88UL) [L8224] dev_ioctl_ops_group4 = (struct v4l2_buffer *)tmp___3 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] CALL, EXPR ldv_zalloc(204UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=204, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=204, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] RET, EXPR ldv_zalloc(204UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(204UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8225] tmp___4 = ldv_zalloc(204UL) [L8226] dev_ioctl_ops_group2 = (struct v4l2_streamparm *)tmp___4 [L8500] RET ldv_initialize_v4l2_ioctl_ops_2() [L8501] ldv_state_variable_3 = 1 [L8502] CALL ldv_initialize_v4l2_file_operations_3() [L8190] void *tmp ; VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] CALL, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=360, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ref_cnt=0, SERIAL_STATE=0, size=360, tmp___0=-2147483648, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] RET, EXPR ldv_zalloc(360UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(360UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8192] tmp = ldv_zalloc(360UL) [L8193] dev_fops_group0 = (struct file *)tmp [L8502] RET ldv_initialize_v4l2_file_operations_3() [L8503] ldv_state_variable_1 = 1 [L8504] ldv_state_variable_4 = 1 [L8505] CALL ldv_initialize_vm_operations_struct_4() [L8199] void *tmp ; VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] CALL, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L5262] void *p ; [L5263] void *tmp ; [L5264] int tmp___0 ; [L5266] tmp___0 = __VERIFIER_nondet_int() [L5267] COND TRUE tmp___0 != 0 [L5268] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=2147483647, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] RET, EXPR ldv_zalloc(184UL) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(184UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8201] tmp = ldv_zalloc(184UL) [L8202] gspca_vm_ops_group0 = (struct vm_area_struct *)tmp [L8505] RET ldv_initialize_vm_operations_struct_4() [L8508] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=2, tmp___46=1, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8427] tmp___43 = __VERIFIER_nondet_int() [L8429] case 0: VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___46=1, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8430] COND TRUE ldv_state_variable_4 != 0 [L8431] tmp___44 = __VERIFIER_nondet_int() [L8433] case 0: [L8440] case 1: VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___44=1, tmp___46=1, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8441] COND TRUE ldv_state_variable_4 == 1 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=646, ldvarg10={0:0}, ldvarg11={0:0}, ldvarg12=649, ldvarg13={0:0}, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19={0:0}, ldvarg2=647, ldvarg20={0:0}, ldvarg21={0:0}, ldvarg22={0:0}, ldvarg23={0:0}, ldvarg24={0:0}, ldvarg25={0:0}, ldvarg26={0:0}, ldvarg27={0:0}, ldvarg28={0:0}, ldvarg29={0:0}, ldvarg3={0:0}, ldvarg30={0:0}, ldvarg31={0:0}, ldvarg32={0:0}, ldvarg33={0:0}, ldvarg34={0:0}, ldvarg35={0:0}, ldvarg36={0:0}, ldvarg37={0:0}, ldvarg38={0:0}, ldvarg39={90:0}, ldvarg4={0:0}, ldvarg40={0:0}, ldvarg41={0:0}, ldvarg42={0:0}, ldvarg43={0:0}, ldvarg44={0:0}, ldvarg45={0:0}, ldvarg5=18446744071562067968, ldvarg6={0:0}, ldvarg7={0:0}, ldvarg8={91:0}, ldvarg9={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=646, tmp___1={0:0}, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=649, tmp___14={0:0}, tmp___15={0:0}, tmp___16={0:0}, tmp___17={0:0}, tmp___18={0:0}, tmp___19={0:0}, tmp___2={0:0}, tmp___20={0:0}, tmp___21={0:0}, tmp___22={0:0}, tmp___23={0:0}, tmp___24={0:0}, tmp___25={0:0}, tmp___26={0:0}, tmp___27={0:0}, tmp___28={0:0}, tmp___29={0:0}, tmp___3={0:0}, tmp___30={0:0}, tmp___31={0:0}, tmp___32={0:0}, tmp___33={0:0}, tmp___34={0:0}, tmp___35={0:0}, tmp___36={0:0}, tmp___37={0:0}, tmp___38={0:0}, tmp___39={0:0}, tmp___4=18446744071562067968, tmp___40={0:0}, tmp___41={0:0}, tmp___42={0:0}, tmp___43=0, tmp___44=1, tmp___46=1, tmp___5=647, tmp___6={0:0}, tmp___7={0:0}, tmp___8={0:0}, tmp___9={0:0}, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8442] CALL gspca_vm_open(gspca_vm_ops_group0) VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}] [L5486] struct gspca_frame *frame ; [L5488] EXPR vma->vm_private_data [L5488] frame = (struct gspca_frame *)vma->vm_private_data [L5489] EXPR frame->vma_use_count VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, frame={654:-10}, frame->vma_use_count=2147483647, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}, vma={0:0}] [L5489] frame->vma_use_count + 1 VAL [={0:0}, ={0:0}, __this_module={487:239}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, dev_fops={87:0}, dev_fops_group0={0:0}, dev_ioctl_ops={88:0}, dev_ioctl_ops_group0={0:0}, dev_ioctl_ops_group1={0:0}, dev_ioctl_ops_group2={0:0}, dev_ioctl_ops_group3={0:0}, dev_ioctl_ops_group4={0:0}, dev_ioctl_ops_group5={0:0}, frame={654:-10}, frame->vma_use_count=2147483647, gspca_debug=0, gspca_template={89:0}, gspca_vm_ops={86:0}, gspca_vm_ops_group0={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ref_cnt=0, SERIAL_STATE=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vma={0:0}, vma={0:0}] * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 134.2MB. Free memory is still 108.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3137.23ms. Allocated memory was 178.3MB in the beginning and 224.4MB in the end (delta: 46.1MB). Free memory was 138.5MB in the beginning and 144.3MB in the end (delta: -5.8MB). Peak memory consumption was 107.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 227.05ms. Allocated memory is still 224.4MB. Free memory was 144.3MB in the beginning and 117.0MB in the end (delta: 27.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 350.36ms. Allocated memory is still 224.4MB. Free memory was 117.0MB in the beginning and 87.6MB in the end (delta: 29.4MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. * RCFGBuilder took 6818.72ms. Allocated memory was 224.4MB in the beginning and 408.9MB in the end (delta: 184.5MB). Free memory was 87.6MB in the beginning and 183.4MB in the end (delta: -95.8MB). Peak memory consumption was 115.6MB. Max. memory is 16.1GB. * CodeCheck took 32800.55ms. Allocated memory was 408.9MB in the beginning and 1.1GB in the end (delta: 671.1MB). Free memory was 182.4MB in the beginning and 748.0MB in the end (delta: -565.6MB). Peak memory consumption was 529.9MB. Max. memory is 16.1GB. * Witness Printer took 530.92ms. Allocated memory is still 1.1GB. Free memory was 748.0MB in the beginning and 537.5MB in the end (delta: 210.5MB). Peak memory consumption was 209.7MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. RESULT: Ultimate proved your program to be incorrect! [2022-11-21 23:03:55,897 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b85c7b38-7549-4959-a39d-f40873f65252/bin/ukojak-jW3SillKbg/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE(OVERFLOW)