./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c -s /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f9b269fee929c2a3187ed7c2821bda9ec7cbeaea ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c -s /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f9b269fee929c2a3187ed7c2821bda9ec7cbeaea ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 00:23:57,200 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 00:23:57,201 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 00:23:57,209 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 00:23:57,210 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 00:23:57,210 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 00:23:57,211 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 00:23:57,212 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 00:23:57,213 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 00:23:57,214 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 00:23:57,214 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 00:23:57,215 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 00:23:57,215 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 00:23:57,216 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 00:23:57,217 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 00:23:57,217 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 00:23:57,218 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 00:23:57,219 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 00:23:57,220 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 00:23:57,221 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 00:23:57,222 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 00:23:57,223 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 00:23:57,224 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 00:23:57,224 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 00:23:57,225 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 00:23:57,225 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 00:23:57,226 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 00:23:57,226 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 00:23:57,227 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 00:23:57,228 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 00:23:57,228 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 00:23:57,228 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 00:23:57,228 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 00:23:57,229 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 00:23:57,229 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 00:23:57,229 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 00:23:57,230 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf [2018-11-23 00:23:57,236 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 00:23:57,236 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 00:23:57,237 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 00:23:57,237 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 00:23:57,237 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 00:23:57,238 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 00:23:57,238 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 00:23:57,238 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 00:23:57,238 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 00:23:57,238 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 00:23:57,238 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 00:23:57,238 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 00:23:57,239 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 00:23:57,239 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 00:23:57,239 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 00:23:57,239 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 00:23:57,239 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 00:23:57,239 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 00:23:57,239 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 00:23:57,239 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 00:23:57,240 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 00:23:57,240 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 00:23:57,240 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 00:23:57,240 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 00:23:57,240 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 00:23:57,240 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 00:23:57,240 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 00:23:57,241 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 00:23:57,241 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f9b269fee929c2a3187ed7c2821bda9ec7cbeaea [2018-11-23 00:23:57,263 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 00:23:57,269 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 00:23:57,271 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 00:23:57,272 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 00:23:57,272 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 00:23:57,272 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 00:23:57,306 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data/45e492e4e/ddd5001e83fe457da915b2ba3a8b24b3/FLAG3f7a64164 [2018-11-23 00:23:57,818 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 00:23:57,819 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 00:23:57,836 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data/45e492e4e/ddd5001e83fe457da915b2ba3a8b24b3/FLAG3f7a64164 [2018-11-23 00:23:58,288 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data/45e492e4e/ddd5001e83fe457da915b2ba3a8b24b3 [2018-11-23 00:23:58,290 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 00:23:58,291 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 00:23:58,291 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 00:23:58,291 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 00:23:58,293 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 00:23:58,294 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:23:58" (1/1) ... [2018-11-23 00:23:58,295 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@17793024 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:58, skipping insertion in model container [2018-11-23 00:23:58,295 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:23:58" (1/1) ... [2018-11-23 00:23:58,301 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 00:23:58,349 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 00:23:58,976 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:23:58,985 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 00:23:59,125 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:23:59,166 INFO L195 MainTranslator]: Completed translation [2018-11-23 00:23:59,166 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59 WrapperNode [2018-11-23 00:23:59,167 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 00:23:59,167 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 00:23:59,167 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 00:23:59,167 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 00:23:59,173 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... [2018-11-23 00:23:59,199 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... [2018-11-23 00:23:59,209 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 00:23:59,209 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 00:23:59,209 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 00:23:59,210 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 00:23:59,216 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... [2018-11-23 00:23:59,216 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... [2018-11-23 00:23:59,220 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... [2018-11-23 00:23:59,221 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... [2018-11-23 00:23:59,240 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... [2018-11-23 00:23:59,243 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... [2018-11-23 00:23:59,246 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... [2018-11-23 00:23:59,251 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 00:23:59,251 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 00:23:59,251 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 00:23:59,251 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 00:23:59,252 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 00:23:59,298 INFO L130 BoogieDeclarations]: Found specification of procedure virtblk_getgeo [2018-11-23 00:23:59,298 INFO L138 BoogieDeclarations]: Found implementation of procedure virtblk_getgeo [2018-11-23 00:23:59,298 INFO L130 BoogieDeclarations]: Found specification of procedure scsi_cmd_ioctl [2018-11-23 00:23:59,298 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 00:23:59,298 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_config_buf [2018-11-23 00:23:59,298 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_config_buf [2018-11-23 00:23:59,299 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 00:23:59,299 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 00:23:59,299 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR___0 [2018-11-23 00:23:59,299 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR___0 [2018-11-23 00:23:59,299 INFO L130 BoogieDeclarations]: Found specification of procedure init [2018-11-23 00:23:59,299 INFO L138 BoogieDeclarations]: Found implementation of procedure init [2018-11-23 00:23:59,299 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_get_blk_rq [2018-11-23 00:23:59,300 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_get_blk_rq [2018-11-23 00:23:59,300 INFO L130 BoogieDeclarations]: Found specification of procedure variable_test_bit [2018-11-23 00:23:59,300 INFO L138 BoogieDeclarations]: Found implementation of procedure variable_test_bit [2018-11-23 00:23:59,300 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-23 00:23:59,300 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-23 00:23:59,300 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_ptr_err [2018-11-23 00:23:59,300 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_ptr_err [2018-11-23 00:23:59,300 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_blkdev [2018-11-23 00:23:59,301 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 00:23:59,301 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2018-11-23 00:23:59,301 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2018-11-23 00:23:59,301 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 00:23:59,301 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 00:23:59,301 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 00:23:59,301 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 00:23:59,301 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_check_driver_offered_feature [2018-11-23 00:23:59,302 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 00:23:59,302 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 00:23:59,302 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_has_feature [2018-11-23 00:23:59,302 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_has_feature [2018-11-23 00:23:59,302 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 00:23:59,302 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 00:23:59,302 INFO L130 BoogieDeclarations]: Found specification of procedure fini [2018-11-23 00:23:59,302 INFO L138 BoogieDeclarations]: Found implementation of procedure fini [2018-11-23 00:23:59,303 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_virtio_driver [2018-11-23 00:23:59,303 INFO L130 BoogieDeclarations]: Found specification of procedure blk_execute_rq [2018-11-23 00:23:59,303 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2018-11-23 00:23:59,303 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 00:23:59,303 INFO L130 BoogieDeclarations]: Found specification of procedure virtblk_ioctl [2018-11-23 00:23:59,303 INFO L138 BoogieDeclarations]: Found implementation of procedure virtblk_ioctl [2018-11-23 00:23:59,303 INFO L130 BoogieDeclarations]: Found specification of procedure register_virtio_driver [2018-11-23 00:23:59,303 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 00:23:59,304 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 00:23:59,304 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 00:23:59,304 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 00:23:59,304 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 00:23:59,304 INFO L130 BoogieDeclarations]: Found specification of procedure bio_put [2018-11-23 00:23:59,304 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 00:23:59,304 INFO L130 BoogieDeclarations]: Found specification of procedure bio_map_kern [2018-11-23 00:23:59,304 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2018-11-23 00:23:59,305 INFO L130 BoogieDeclarations]: Found specification of procedure blk_make_request [2018-11-23 00:23:59,305 INFO L130 BoogieDeclarations]: Found specification of procedure register_blkdev [2018-11-23 00:23:59,305 INFO L130 BoogieDeclarations]: Found specification of procedure get_capacity [2018-11-23 00:23:59,305 INFO L138 BoogieDeclarations]: Found implementation of procedure get_capacity [2018-11-23 00:23:59,305 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blk_make_request_5 [2018-11-23 00:23:59,305 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blk_make_request_5 [2018-11-23 00:23:59,305 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 00:23:59,305 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2018-11-23 00:23:59,305 INFO L130 BoogieDeclarations]: Found specification of procedure virtblk_get_id [2018-11-23 00:23:59,306 INFO L138 BoogieDeclarations]: Found implementation of procedure virtblk_get_id [2018-11-23 00:23:59,306 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-23 00:23:59,306 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-23 00:23:59,306 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 00:23:59,306 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 00:23:59,306 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 00:23:59,306 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 00:23:59,884 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 00:23:59,884 INFO L280 CfgBuilder]: Removed 0 assue(true) statements. [2018-11-23 00:23:59,885 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:23:59 BoogieIcfgContainer [2018-11-23 00:23:59,885 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 00:23:59,886 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 00:23:59,886 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 00:23:59,888 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 00:23:59,889 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:23:58" (1/3) ... [2018-11-23 00:23:59,889 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@17162f09 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:23:59, skipping insertion in model container [2018-11-23 00:23:59,889 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:23:59" (2/3) ... [2018-11-23 00:23:59,890 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@17162f09 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:23:59, skipping insertion in model container [2018-11-23 00:23:59,890 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:23:59" (3/3) ... [2018-11-23 00:23:59,892 INFO L112 eAbstractionObserver]: Analyzing ICFG m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 00:23:59,898 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 00:23:59,906 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 00:23:59,916 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 00:23:59,937 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 00:23:59,938 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 00:23:59,938 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 00:23:59,938 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 00:23:59,938 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 00:23:59,939 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 00:23:59,939 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 00:23:59,939 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 00:23:59,939 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 00:23:59,953 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states. [2018-11-23 00:23:59,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2018-11-23 00:23:59,958 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:23:59,959 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:23:59,961 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:23:59,964 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:23:59,964 INFO L82 PathProgramCache]: Analyzing trace with hash 217334458, now seen corresponding path program 1 times [2018-11-23 00:23:59,965 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:23:59,966 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:24:00,005 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:24:00,005 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:24:00,005 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:24:00,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:24:00,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:24:00,171 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:24:00,171 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:24:00,173 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:24:00,181 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:24:00,181 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:24:00,182 INFO L87 Difference]: Start difference. First operand 147 states. Second operand 3 states. [2018-11-23 00:24:00,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:24:00,250 INFO L93 Difference]: Finished difference Result 387 states and 475 transitions. [2018-11-23 00:24:00,250 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:24:00,251 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2018-11-23 00:24:00,252 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:24:00,264 INFO L225 Difference]: With dead ends: 387 [2018-11-23 00:24:00,264 INFO L226 Difference]: Without dead ends: 240 [2018-11-23 00:24:00,267 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:24:00,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2018-11-23 00:24:00,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2018-11-23 00:24:00,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 240 states. [2018-11-23 00:24:00,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 287 transitions. [2018-11-23 00:24:00,325 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 287 transitions. Word has length 17 [2018-11-23 00:24:00,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:24:00,326 INFO L480 AbstractCegarLoop]: Abstraction has 240 states and 287 transitions. [2018-11-23 00:24:00,326 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:24:00,326 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 287 transitions. [2018-11-23 00:24:00,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 00:24:00,332 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:24:00,332 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:24:00,332 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:24:00,332 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:24:00,333 INFO L82 PathProgramCache]: Analyzing trace with hash -1838183177, now seen corresponding path program 1 times [2018-11-23 00:24:00,333 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:24:00,333 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:24:00,338 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:24:00,338 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:24:00,338 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:24:00,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:24:00,454 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2018-11-23 00:24:00,454 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:24:00,455 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:24:00,456 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:24:00,456 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:24:00,456 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:24:00,457 INFO L87 Difference]: Start difference. First operand 240 states and 287 transitions. Second operand 5 states. [2018-11-23 00:24:00,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:24:00,495 INFO L93 Difference]: Finished difference Result 471 states and 564 transitions. [2018-11-23 00:24:00,495 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:24:00,495 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 74 [2018-11-23 00:24:00,496 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:24:00,497 INFO L225 Difference]: With dead ends: 471 [2018-11-23 00:24:00,497 INFO L226 Difference]: Without dead ends: 240 [2018-11-23 00:24:00,499 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:24:00,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2018-11-23 00:24:00,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2018-11-23 00:24:00,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 240 states. [2018-11-23 00:24:00,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 286 transitions. [2018-11-23 00:24:00,522 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 286 transitions. Word has length 74 [2018-11-23 00:24:00,522 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:24:00,522 INFO L480 AbstractCegarLoop]: Abstraction has 240 states and 286 transitions. [2018-11-23 00:24:00,523 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:24:00,523 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 286 transitions. [2018-11-23 00:24:00,525 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 00:24:00,525 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:24:00,525 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:24:00,525 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:24:00,526 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:24:00,526 INFO L82 PathProgramCache]: Analyzing trace with hash -56683242, now seen corresponding path program 1 times [2018-11-23 00:24:00,526 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 00:24:00,526 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 00:24:00,529 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:24:00,529 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:24:00,529 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 00:24:00,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 00:24:00,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 00:24:00,651 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=27670116110564327452, |#NULL.offset|=27670116110564327472, |#t~string108.base|=27670116110564327435, |#t~string108.offset|=27670116110564327469, |#t~string289.base|=27670116110564327480, |#t~string289.offset|=27670116110564327482, |#t~string292.base|=27670116110564327429, |#t~string292.offset|=27670116110564327465, |#t~string306.base|=27670116110564327483, |#t~string306.offset|=27670116110564327427, |#t~string309.base|=27670116110564327462, |#t~string309.offset|=27670116110564327446, |#t~string312.base|=27670116110564327454, |#t~string312.offset|=27670116110564327438, |#t~string387.base|=27670116110564327442, |#t~string387.offset|=27670116110564327459, |#t~string388.base|=27670116110564327431, |#t~string388.offset|=27670116110564327443, |#t~string391.base|=27670116110564327453, |#t~string391.offset|=27670116110564327473, |old(#NULL.base)|=27670116110564327452, |old(#NULL.offset)|=27670116110564327472, |old(#t~string108.base)|=27670116110564327435, |old(#t~string108.offset)|=27670116110564327469, |old(#t~string289.base)|=27670116110564327480, |old(#t~string289.offset)|=27670116110564327482, |old(#t~string292.base)|=27670116110564327429, |old(#t~string292.offset)|=27670116110564327465, |old(#t~string306.base)|=27670116110564327483, |old(#t~string306.offset)|=27670116110564327427, |old(#t~string309.base)|=27670116110564327462, |old(#t~string309.offset)|=27670116110564327446, |old(#t~string312.base)|=27670116110564327454, |old(#t~string312.offset)|=27670116110564327438, |old(#t~string387.base)|=27670116110564327442, |old(#t~string387.offset)|=27670116110564327459, |old(#t~string388.base)|=27670116110564327431, |old(#t~string388.offset)|=27670116110564327443, |old(#t~string391.base)|=27670116110564327453, |old(#t~string391.offset)|=27670116110564327473, |old(~#features~0.base)|=27670116110564327456, |old(~#features~0.offset)|=27670116110564327478, |old(~#id_table~0.base)|=27670116110564327428, |old(~#id_table~0.offset)|=27670116110564327477, |old(~#virtblk_fops~0.base)|=27670116110564327434, |old(~#virtblk_fops~0.offset)|=27670116110564327474, |old(~#virtio_blk~0.base)|=27670116110564327444, |old(~#virtio_blk~0.offset)|=27670116110564327458, |old(~__mod_virtio_device_table~0.device)|=27670116110564327430, |old(~__mod_virtio_device_table~0.vendor)|=27670116110564327432, |old(~index~0)|=27670116110564327449, |old(~ldv_blk_rq~0)|=27670116110564327471, |old(~LDV_IN_INTERRUPT~0)|=27670116110564327447, |old(~major~0)|=27670116110564327466, |~#features~0.base|=27670116110564327456, |~#features~0.offset|=27670116110564327478, |~#id_table~0.base|=27670116110564327428, |~#id_table~0.offset|=27670116110564327477, |~#virtblk_fops~0.base|=27670116110564327434, |~#virtblk_fops~0.offset|=27670116110564327474, |~#virtio_blk~0.base|=27670116110564327444, |~#virtio_blk~0.offset|=27670116110564327458, ~__mod_virtio_device_table~0.device=27670116110564327430, ~__mod_virtio_device_table~0.vendor=27670116110564327432, ~index~0=27670116110564327449, ~ldv_blk_rq~0=27670116110564327471, ~LDV_IN_INTERRUPT~0=27670116110564327447, ~major~0=27670116110564327466] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28);call #t~string289.base, #t~string289.offset := #Ultimate.alloc(22);call #t~string292.base, #t~string292.offset := #Ultimate.alloc(9);call #t~string306.base, #t~string306.offset := #Ultimate.alloc(5);call write~init~int(118, #t~string306.base, #t~string306.offset, 1);call write~init~int(100, #t~string306.base, 1 + #t~string306.offset, 1);call write~init~int(37, #t~string306.base, 2 + #t~string306.offset, 1);call write~init~int(99, #t~string306.base, 3 + #t~string306.offset, 1);call write~init~int(0, #t~string306.base, 4 + #t~string306.offset, 1);call #t~string309.base, #t~string309.offset := #Ultimate.alloc(7);call write~init~int(118, #t~string309.base, #t~string309.offset, 1);call write~init~int(100, #t~string309.base, 1 + #t~string309.offset, 1);call write~init~int(37, #t~string309.base, 2 + #t~string309.offset, 1);call write~init~int(99, #t~string309.base, 3 + #t~string309.offset, 1);call write~init~int(37, #t~string309.base, 4 + #t~string309.offset, 1);call write~init~int(99, #t~string309.base, 5 + #t~string309.offset, 1);call write~init~int(0, #t~string309.base, 6 + #t~string309.offset, 1);call #t~string312.base, #t~string312.offset := #Ultimate.alloc(9);call #t~string387.base, #t~string387.offset := #Ultimate.alloc(11);call #t~string388.base, #t~string388.offset := #Ultimate.alloc(8);call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8);~major~0 := 0;~index~0 := 0;call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36);call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4);call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4);call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4);call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4);call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4);call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4);call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4);call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4);call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4);~LDV_IN_INTERRUPT~0 := 0;~ldv_blk_rq~0 := 0;call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8);call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16);call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4);call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4);call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4);call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4);call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141);call write~init~$Pointer$(#t~string387.base, #t~string387.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8);call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8);call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4);call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8);~__mod_virtio_device_table~0.device := 0;~__mod_virtio_device_table~0.vendor := 0; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(#NULL.base)|=27670116110564327452, |old(#NULL.offset)|=27670116110564327472, |old(#t~string108.base)|=27670116110564327435, |old(#t~string108.offset)|=27670116110564327469, |old(#t~string289.base)|=27670116110564327480, |old(#t~string289.offset)|=27670116110564327482, |old(#t~string292.base)|=27670116110564327429, |old(#t~string292.offset)|=27670116110564327465, |old(#t~string306.base)|=27670116110564327483, |old(#t~string306.offset)|=27670116110564327427, |old(#t~string309.base)|=27670116110564327462, |old(#t~string309.offset)|=27670116110564327446, |old(#t~string312.base)|=27670116110564327454, |old(#t~string312.offset)|=27670116110564327438, |old(#t~string387.base)|=27670116110564327442, |old(#t~string387.offset)|=27670116110564327459, |old(#t~string388.base)|=27670116110564327431, |old(#t~string388.offset)|=27670116110564327443, |old(#t~string391.base)|=27670116110564327453, |old(#t~string391.offset)|=27670116110564327473, |old(~#features~0.base)|=27670116110564327456, |old(~#features~0.offset)|=27670116110564327478, |old(~#id_table~0.base)|=27670116110564327428, |old(~#id_table~0.offset)|=27670116110564327477, |old(~#virtblk_fops~0.base)|=27670116110564327434, |old(~#virtblk_fops~0.offset)|=27670116110564327474, |old(~#virtio_blk~0.base)|=27670116110564327444, |old(~#virtio_blk~0.offset)|=27670116110564327458, |old(~__mod_virtio_device_table~0.device)|=27670116110564327430, |old(~__mod_virtio_device_table~0.vendor)|=27670116110564327432, |old(~index~0)|=27670116110564327449, |old(~ldv_blk_rq~0)|=27670116110564327471, |old(~LDV_IN_INTERRUPT~0)|=27670116110564327447, |old(~major~0)|=27670116110564327466, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(#NULL.base)|=27670116110564327452, |old(#NULL.offset)|=27670116110564327472, |old(#t~string108.base)|=27670116110564327435, |old(#t~string108.offset)|=27670116110564327469, |old(#t~string289.base)|=27670116110564327480, |old(#t~string289.offset)|=27670116110564327482, |old(#t~string292.base)|=27670116110564327429, |old(#t~string292.offset)|=27670116110564327465, |old(#t~string306.base)|=27670116110564327483, |old(#t~string306.offset)|=27670116110564327427, |old(#t~string309.base)|=27670116110564327462, |old(#t~string309.offset)|=27670116110564327446, |old(#t~string312.base)|=27670116110564327454, |old(#t~string312.offset)|=27670116110564327438, |old(#t~string387.base)|=27670116110564327442, |old(#t~string387.offset)|=27670116110564327459, |old(#t~string388.base)|=27670116110564327431, |old(#t~string388.offset)|=27670116110564327443, |old(#t~string391.base)|=27670116110564327453, |old(#t~string391.offset)|=27670116110564327473, |old(~#features~0.base)|=27670116110564327456, |old(~#features~0.offset)|=27670116110564327478, |old(~#id_table~0.base)|=27670116110564327428, |old(~#id_table~0.offset)|=27670116110564327477, |old(~#virtblk_fops~0.base)|=27670116110564327434, |old(~#virtblk_fops~0.offset)|=27670116110564327474, |old(~#virtio_blk~0.base)|=27670116110564327444, |old(~#virtio_blk~0.offset)|=27670116110564327458, |old(~__mod_virtio_device_table~0.device)|=27670116110564327430, |old(~__mod_virtio_device_table~0.vendor)|=27670116110564327432, |old(~index~0)|=27670116110564327449, |old(~ldv_blk_rq~0)|=27670116110564327471, |old(~LDV_IN_INTERRUPT~0)|=27670116110564327447, |old(~major~0)|=27670116110564327466, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] RET #268#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] CALL call #t~ret405 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] havoc ~var_group1~0.base, ~var_group1~0.offset;havoc ~var_virtblk_ioctl_5_p1~0;havoc ~var_virtblk_ioctl_5_p2~0;havoc ~var_virtblk_ioctl_5_p3~0;havoc ~var_group2~0.base, ~var_group2~0.offset;havoc ~tmp~21;havoc ~tmp___0~13;havoc ~tmp___1~8;~LDV_IN_INTERRUPT~0 := 1;call ldv_initialize();call ldv_handler_precall(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret392 := init(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] havoc ~tmp~20;call #t~ret389 := register_blkdev(0, #t~string388.base, #t~string388.offset);assume -2147483648 <= #t~ret389 && #t~ret389 <= 2147483647;~major~0 := #t~ret389;havoc #t~ret389; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(~major~0 < 0);call #t~ret390 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset);assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647;~tmp~20 := #t~ret390;havoc #t~ret390;#res := ~tmp~20; VAL [init_~tmp~20=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |init_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [init_~tmp~20=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |init_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #226#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |main_#t~ret392|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647;~tmp~21 := #t~ret392;havoc #t~ret392; VAL [main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 != ~tmp~21); VAL [main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647;~tmp___1~8 := #t~nondet397;havoc #t~nondet397; VAL [main_~tmp___1~8=1, main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume 0 != ~tmp___1~8; VAL [main_~tmp___1~8=1, main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -2147483648 <= #t~nondet393 && #t~nondet393 <= 2147483647;~tmp___0~13 := #t~nondet393;havoc #t~nondet393;#t~switch394 := 0 == ~tmp___0~13; VAL [main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume #t~switch394;call ldv_handler_precall(); VAL [main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_ioctl_#in~bdev.base|=27670116110564327460, |virtblk_ioctl_#in~bdev.offset|=0, |virtblk_ioctl_#in~cmd|=1447184708, |virtblk_ioctl_#in~data|=27670116110564327424, |virtblk_ioctl_#in~mode|=27670116110564327476, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~bdev.base, ~bdev.offset := #in~bdev.base, #in~bdev.offset;~mode := #in~mode;~cmd := #in~cmd;~data := #in~data;havoc ~disk~0.base, ~disk~0.offset;havoc ~vblk~3.base, ~vblk~3.offset;havoc ~usr_data~0.base, ~usr_data~0.offset;call ~#id_str~0.base, ~#id_str~0.offset := #Ultimate.alloc(20);havoc ~err~1;havoc ~tmp~16;havoc ~tmp___0~10;havoc ~tmp___1~6;havoc ~tmp___2~2;call #t~mem264.base, #t~mem264.offset := read~$Pointer$(~bdev.base, 240 + ~bdev.offset, 8);~disk~0.base, ~disk~0.offset := #t~mem264.base, #t~mem264.offset;havoc #t~mem264.base, #t~mem264.offset;call #t~mem265.base, #t~mem265.offset := read~$Pointer$(~disk~0.base, 1075 + ~disk~0.offset, 8);~vblk~3.base, ~vblk~3.offset := #t~mem265.base, #t~mem265.offset;havoc #t~mem265.base, #t~mem265.offset; VAL [virtblk_ioctl_~bdev.base=27670116110564327460, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=27670116110564327424, virtblk_ioctl_~disk~0.base=27670116110564327426, virtblk_ioctl_~disk~0.offset=0, virtblk_ioctl_~mode=27670116110564327476, virtblk_ioctl_~vblk~3.base=27670116110564327450, virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_ioctl_#in~bdev.base|=27670116110564327460, |virtblk_ioctl_#in~bdev.offset|=0, |virtblk_ioctl_#in~cmd|=1447184708, |virtblk_ioctl_#in~data|=27670116110564327424, |virtblk_ioctl_#in~mode|=27670116110564327476, |virtblk_ioctl_~#id_str~0.base|=27670116110564327457, |virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume 1447184708 == ~cmd % 4294967296;~usr_data~0.base, ~usr_data~0.offset := 0, (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); VAL [virtblk_ioctl_~bdev.base=27670116110564327460, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=27670116110564327424, virtblk_ioctl_~disk~0.base=27670116110564327426, virtblk_ioctl_~disk~0.offset=0, virtblk_ioctl_~mode=27670116110564327476, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=(- 9223372036854775808), virtblk_ioctl_~vblk~3.base=27670116110564327450, virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_ioctl_#in~bdev.base|=27670116110564327460, |virtblk_ioctl_#in~bdev.offset|=0, |virtblk_ioctl_#in~cmd|=1447184708, |virtblk_ioctl_#in~data|=27670116110564327424, |virtblk_ioctl_#in~mode|=27670116110564327476, |virtblk_ioctl_~#id_str~0.base|=27670116110564327457, |virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~disk.base, ~disk.offset := #in~disk.base, #in~disk.offset;~id_str.base, ~id_str.offset := #in~id_str.base, #in~id_str.offset;havoc ~vblk~2.base, ~vblk~2.offset;havoc ~req~1.base, ~req~1.offset;havoc ~bio~0.base, ~bio~0.offset;havoc ~tmp~15;havoc ~tmp___0~9;havoc ~tmp___1~5;havoc ~tmp___2~1;havoc ~tmp___3~1;call #t~mem249.base, #t~mem249.offset := read~$Pointer$(~disk.base, 1075 + ~disk.offset, 8);~vblk~2.base, ~vblk~2.offset := #t~mem249.base, #t~mem249.offset;havoc #t~mem249.base, #t~mem249.offset;call #t~mem250.base, #t~mem250.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8);call #t~mem251.base, #t~mem251.offset := read~$Pointer$(#t~mem250.base, 1067 + #t~mem250.offset, 8);call #t~ret252.base, #t~ret252.offset := bio_map_kern(#t~mem251.base, #t~mem251.offset, ~id_str.base, ~id_str.offset, 20, 208);~bio~0.base, ~bio~0.offset := #t~ret252.base, #t~ret252.offset;havoc #t~mem250.base, #t~mem250.offset;havoc #t~mem251.base, #t~mem251.offset;havoc #t~ret252.base, #t~ret252.offset; VAL [virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~24; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [ldv_is_err_~ptr.base=0, ldv_is_err_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |ldv_is_err_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [ldv_is_err_~ptr.base=0, ldv_is_err_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |ldv_is_err_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #272#return; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#t~ret400|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807;~tmp~24 := #t~ret400;havoc #t~ret400;#res := ~tmp~24; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, IS_ERR_~tmp~24=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, IS_ERR_~tmp~24=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #256#return; VAL [virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |virtblk_get_id_#t~ret253|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -9223372036854775808 <= #t~ret253 && #t~ret253 <= 9223372036854775807;~tmp___0~9 := #t~ret253;havoc #t~ret253; VAL [virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 != ~tmp___0~9);call #t~mem255.base, #t~mem255.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8);call #t~mem256.base, #t~mem256.offset := read~$Pointer$(#t~mem255.base, 1067 + #t~mem255.offset, 8); VAL [virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |virtblk_get_id_#t~mem255.base|=27670116110564327433, |virtblk_get_id_#t~mem255.offset|=0, |virtblk_get_id_#t~mem256.base|=27670116110564327464, |virtblk_get_id_#t~mem256.offset|=27670116110564327468, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=27670116110564327464, |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=27670116110564327468, |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ldv_func_arg1.base, ~ldv_func_arg1.offset := #in~ldv_func_arg1.base, #in~ldv_func_arg1.offset;~ldv_func_arg2.base, ~ldv_func_arg2.offset := #in~ldv_func_arg2.base, #in~ldv_func_arg2.offset;~ldv_func_arg3 := #in~ldv_func_arg3;havoc ~ldv_func_res~0.base, ~ldv_func_res~0.offset;havoc ~tmp~25.base, ~tmp~25.offset;call #t~ret401.base, #t~ret401.offset := blk_make_request(~ldv_func_arg1.base, ~ldv_func_arg1.offset, ~ldv_func_arg2.base, ~ldv_func_arg2.offset, ~ldv_func_arg3);~tmp~25.base, ~tmp~25.offset := #t~ret401.base, #t~ret401.offset;havoc #t~ret401.base, #t~ret401.offset;~ldv_func_res~0.base, ~ldv_func_res~0.offset := ~tmp~25.base, ~tmp~25.offset; VAL [ldv_blk_make_request_5_~ldv_func_arg1.base=27670116110564327464, ldv_blk_make_request_5_~ldv_func_arg1.offset=27670116110564327468, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=0, ldv_blk_make_request_5_~ldv_func_res~0.offset=0, ldv_blk_make_request_5_~tmp~25.base=0, ldv_blk_make_request_5_~tmp~25.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=27670116110564327464, |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=27670116110564327468, |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_get_blk_rq_#in~mask|=208, |ldv_get_blk_rq_#in~res.base|=0, |ldv_get_blk_rq_#in~res.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~res.base, ~res.offset := #in~res.base, #in~res.offset;~mask := #in~mask;havoc ~tmp~28; VAL [ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=0, ldv_get_blk_rq_~res.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_get_blk_rq_#in~mask|=208, |ldv_get_blk_rq_#in~res.base|=0, |ldv_get_blk_rq_#in~res.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume 0 == ~ldv_blk_rq~0; VAL [ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=0, ldv_get_blk_rq_~res.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_get_blk_rq_#in~mask|=208, |ldv_get_blk_rq_#in~res.base|=0, |ldv_get_blk_rq_#in~res.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296;~ldv_blk_rq~0 := 1; VAL [ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=0, ldv_get_blk_rq_~res.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_get_blk_rq_#in~mask|=208, |ldv_get_blk_rq_#in~res.base|=0, |ldv_get_blk_rq_#in~res.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=0, ldv_get_blk_rq_~res.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_get_blk_rq_#in~mask|=208, |ldv_get_blk_rq_#in~res.base|=0, |ldv_get_blk_rq_#in~res.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #242#return; VAL [ldv_blk_make_request_5_~ldv_func_arg1.base=27670116110564327464, ldv_blk_make_request_5_~ldv_func_arg1.offset=27670116110564327468, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=0, ldv_blk_make_request_5_~ldv_func_res~0.offset=0, ldv_blk_make_request_5_~tmp~25.base=0, ldv_blk_make_request_5_~tmp~25.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=27670116110564327464, |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=27670116110564327468, |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] #res.base, #res.offset := ~ldv_func_res~0.base, ~ldv_func_res~0.offset; VAL [ldv_blk_make_request_5_~ldv_func_arg1.base=27670116110564327464, ldv_blk_make_request_5_~ldv_func_arg1.offset=27670116110564327468, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=0, ldv_blk_make_request_5_~ldv_func_res~0.offset=0, ldv_blk_make_request_5_~tmp~25.base=0, ldv_blk_make_request_5_~tmp~25.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=27670116110564327464, |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=27670116110564327468, |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ldv_blk_make_request_5_#res.base|=0, |ldv_blk_make_request_5_#res.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [ldv_blk_make_request_5_~ldv_func_arg1.base=27670116110564327464, ldv_blk_make_request_5_~ldv_func_arg1.offset=27670116110564327468, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=0, ldv_blk_make_request_5_~ldv_func_res~0.offset=0, ldv_blk_make_request_5_~tmp~25.base=0, ldv_blk_make_request_5_~tmp~25.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=27670116110564327464, |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=27670116110564327468, |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ldv_blk_make_request_5_#res.base|=0, |ldv_blk_make_request_5_#res.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #260#return; VAL [virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |virtblk_get_id_#t~mem255.base|=27670116110564327433, |virtblk_get_id_#t~mem255.offset|=0, |virtblk_get_id_#t~mem256.base|=27670116110564327464, |virtblk_get_id_#t~mem256.offset|=27670116110564327468, |virtblk_get_id_#t~ret257.base|=0, |virtblk_get_id_#t~ret257.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~req~1.base, ~req~1.offset := #t~ret257.base, #t~ret257.offset;havoc #t~ret257.base, #t~ret257.offset;havoc #t~mem256.base, #t~mem256.offset;havoc #t~mem255.base, #t~mem255.offset; VAL [virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=0, virtblk_get_id_~req~1.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~24; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [ldv_is_err_~ptr.base=0, ldv_is_err_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |ldv_is_err_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [ldv_is_err_~ptr.base=0, ldv_is_err_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |ldv_is_err_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #272#return; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#t~ret400|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807;~tmp~24 := #t~ret400;havoc #t~ret400;#res := ~tmp~24; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, IS_ERR_~tmp~24=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, IS_ERR_~tmp~24=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#res|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #262#return; VAL [virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=0, virtblk_get_id_~req~1.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |virtblk_get_id_#t~ret258|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -9223372036854775808 <= #t~ret258 && #t~ret258 <= 9223372036854775807;~tmp___2~1 := #t~ret258;havoc #t~ret258; VAL [virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=0, virtblk_get_id_~req~1.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 != ~tmp___2~1);call write~int(7, ~req~1.base, 64 + ~req~1.offset, 4);call #t~mem260.base, #t~mem260.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8);call #t~mem261.base, #t~mem261.offset := read~$Pointer$(#t~mem260.base, 1067 + #t~mem260.offset, 8);call #t~mem262.base, #t~mem262.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8);call #t~ret263 := blk_execute_rq(#t~mem261.base, #t~mem261.offset, #t~mem262.base, #t~mem262.offset, ~req~1.base, ~req~1.offset, 0);assume -2147483648 <= #t~ret263 && #t~ret263 <= 2147483647;~tmp___3~1 := #t~ret263;havoc #t~mem261.base, #t~mem261.offset;havoc #t~mem262.base, #t~mem262.offset;havoc #t~ret263;havoc #t~mem260.base, #t~mem260.offset;#res := ~tmp___3~1; VAL [virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=0, virtblk_get_id_~req~1.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=13, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |virtblk_get_id_#res|=13, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=27670116110564327426, virtblk_get_id_~disk.offset=0, virtblk_get_id_~id_str.base=27670116110564327457, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=0, virtblk_get_id_~req~1.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=13, virtblk_get_id_~vblk~2.base=27670116110564327450, virtblk_get_id_~vblk~2.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_get_id_#in~disk.base|=27670116110564327426, |virtblk_get_id_#in~disk.offset|=0, |virtblk_get_id_#in~id_str.base|=27670116110564327457, |virtblk_get_id_#in~id_str.offset|=0, |virtblk_get_id_#res|=13, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #248#return; VAL [virtblk_ioctl_~bdev.base=27670116110564327460, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=27670116110564327424, virtblk_ioctl_~disk~0.base=27670116110564327426, virtblk_ioctl_~disk~0.offset=0, virtblk_ioctl_~mode=27670116110564327476, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=(- 9223372036854775808), virtblk_ioctl_~vblk~3.base=27670116110564327450, virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_ioctl_#in~bdev.base|=27670116110564327460, |virtblk_ioctl_#in~bdev.offset|=0, |virtblk_ioctl_#in~cmd|=1447184708, |virtblk_ioctl_#in~data|=27670116110564327424, |virtblk_ioctl_#in~mode|=27670116110564327476, |virtblk_ioctl_#t~ret266|=13, |virtblk_ioctl_~#id_str~0.base|=27670116110564327457, |virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647;~err~1 := #t~ret266;havoc #t~ret266; VAL [virtblk_ioctl_~bdev.base=27670116110564327460, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=27670116110564327424, virtblk_ioctl_~disk~0.base=27670116110564327426, virtblk_ioctl_~disk~0.offset=0, virtblk_ioctl_~err~1=13, virtblk_ioctl_~mode=27670116110564327476, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=(- 9223372036854775808), virtblk_ioctl_~vblk~3.base=27670116110564327450, virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_ioctl_#in~bdev.base|=27670116110564327460, |virtblk_ioctl_#in~bdev.offset|=0, |virtblk_ioctl_#in~cmd|=1447184708, |virtblk_ioctl_#in~data|=27670116110564327424, |virtblk_ioctl_#in~mode|=27670116110564327476, |virtblk_ioctl_~#id_str~0.base|=27670116110564327457, |virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 == ~err~1); VAL [virtblk_ioctl_~bdev.base=27670116110564327460, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=27670116110564327424, virtblk_ioctl_~disk~0.base=27670116110564327426, virtblk_ioctl_~disk~0.offset=0, virtblk_ioctl_~err~1=13, virtblk_ioctl_~mode=27670116110564327476, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=(- 9223372036854775808), virtblk_ioctl_~vblk~3.base=27670116110564327450, virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_ioctl_#in~bdev.base|=27670116110564327460, |virtblk_ioctl_#in~bdev.offset|=0, |virtblk_ioctl_#in~cmd|=1447184708, |virtblk_ioctl_#in~data|=27670116110564327424, |virtblk_ioctl_#in~mode|=27670116110564327476, |virtblk_ioctl_~#id_str~0.base|=27670116110564327457, |virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] #res := ~err~1;call ULTIMATE.dealloc(~#id_str~0.base, ~#id_str~0.offset);havoc ~#id_str~0.base, ~#id_str~0.offset; VAL [virtblk_ioctl_~bdev.base=27670116110564327460, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=27670116110564327424, virtblk_ioctl_~disk~0.base=27670116110564327426, virtblk_ioctl_~disk~0.offset=0, virtblk_ioctl_~err~1=13, virtblk_ioctl_~mode=27670116110564327476, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=(- 9223372036854775808), virtblk_ioctl_~vblk~3.base=27670116110564327450, virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_ioctl_#in~bdev.base|=27670116110564327460, |virtblk_ioctl_#in~bdev.offset|=0, |virtblk_ioctl_#in~cmd|=1447184708, |virtblk_ioctl_#in~data|=27670116110564327424, |virtblk_ioctl_#in~mode|=27670116110564327476, |virtblk_ioctl_#res|=13, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [virtblk_ioctl_~bdev.base=27670116110564327460, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=27670116110564327424, virtblk_ioctl_~disk~0.base=27670116110564327426, virtblk_ioctl_~disk~0.offset=0, virtblk_ioctl_~err~1=13, virtblk_ioctl_~mode=27670116110564327476, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=(- 9223372036854775808), virtblk_ioctl_~vblk~3.base=27670116110564327450, virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |virtblk_ioctl_#in~bdev.base|=27670116110564327460, |virtblk_ioctl_#in~bdev.offset|=0, |virtblk_ioctl_#in~cmd|=1447184708, |virtblk_ioctl_#in~data|=27670116110564327424, |virtblk_ioctl_#in~mode|=27670116110564327476, |virtblk_ioctl_#res|=13, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #228#return; VAL [main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=27670116110564327460, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=27670116110564327476, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=27670116110564327424, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |main_#t~ret395|=13, |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -2147483648 <= #t~ret395 && #t~ret395 <= 2147483647;havoc #t~ret395; VAL [main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=27670116110564327460, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=27670116110564327476, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=27670116110564327424, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647;~tmp___1~8 := #t~nondet397;havoc #t~nondet397; VAL [main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=27670116110564327460, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=27670116110564327476, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=27670116110564327424, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 != ~tmp___1~8);call ldv_handler_precall(); VAL [main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=27670116110564327460, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=27670116110564327476, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=27670116110564327424, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call fini(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] call unregister_blkdev(~major~0, #t~string391.base, #t~string391.offset);call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #232#return; VAL [main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=27670116110564327460, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=27670116110564327476, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=27670116110564327424, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call ldv_check_final_state(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 == ~ldv_blk_rq~0); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call ldv_error(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !false; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=27670116110564327440, |#t~string108.offset|=0, |#t~string289.base|=27670116110564327479, |#t~string289.offset|=0, |#t~string292.base|=27670116110564327425, |#t~string292.offset|=0, |#t~string306.base|=27670116110564327481, |#t~string306.offset|=0, |#t~string309.base|=27670116110564327461, |#t~string309.offset|=0, |#t~string312.base|=27670116110564327455, |#t~string312.offset|=0, |#t~string387.base|=27670116110564327441, |#t~string387.offset|=0, |#t~string388.base|=27670116110564327436, |#t~string388.offset|=0, |#t~string391.base|=27670116110564327451, |#t~string391.offset|=0, |old(~ldv_blk_rq~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~major~0)|=0, |~#__this_module~0.base|=27670116110564327463, |~#__this_module~0.offset|=27670116110564327467, |~#features~0.base|=27670116110564327470, |~#features~0.offset|=0, |~#id_table~0.base|=27670116110564327448, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27670116110564327437, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=27670116110564327445, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=27670116110564327452, #NULL.offset=27670116110564327472, #t~string108.base=27670116110564327435, #t~string108.offset=27670116110564327469, #t~string289.base=27670116110564327480, #t~string289.offset=27670116110564327482, #t~string292.base=27670116110564327429, #t~string292.offset=27670116110564327465, #t~string306.base=27670116110564327483, #t~string306.offset=27670116110564327427, #t~string309.base=27670116110564327462, #t~string309.offset=27670116110564327446, #t~string312.base=27670116110564327454, #t~string312.offset=27670116110564327438, #t~string387.base=27670116110564327442, #t~string387.offset=27670116110564327459, #t~string388.base=27670116110564327431, #t~string388.offset=27670116110564327443, #t~string391.base=27670116110564327453, #t~string391.offset=27670116110564327473, old(#NULL.base)=27670116110564327452, old(#NULL.offset)=27670116110564327472, old(#t~string108.base)=27670116110564327435, old(#t~string108.offset)=27670116110564327469, old(#t~string289.base)=27670116110564327480, old(#t~string289.offset)=27670116110564327482, old(#t~string292.base)=27670116110564327429, old(#t~string292.offset)=27670116110564327465, old(#t~string306.base)=27670116110564327483, old(#t~string306.offset)=27670116110564327427, old(#t~string309.base)=27670116110564327462, old(#t~string309.offset)=27670116110564327446, old(#t~string312.base)=27670116110564327454, old(#t~string312.offset)=27670116110564327438, old(#t~string387.base)=27670116110564327442, old(#t~string387.offset)=27670116110564327459, old(#t~string388.base)=27670116110564327431, old(#t~string388.offset)=27670116110564327443, old(#t~string391.base)=27670116110564327453, old(#t~string391.offset)=27670116110564327473, old(~#features~0.base)=27670116110564327456, old(~#features~0.offset)=27670116110564327478, old(~#id_table~0.base)=27670116110564327428, old(~#id_table~0.offset)=27670116110564327477, old(~#virtblk_fops~0.base)=27670116110564327434, old(~#virtblk_fops~0.offset)=27670116110564327474, old(~#virtio_blk~0.base)=27670116110564327444, old(~#virtio_blk~0.offset)=27670116110564327458, old(~__mod_virtio_device_table~0.device)=27670116110564327430, old(~__mod_virtio_device_table~0.vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#features~0.base=27670116110564327456, ~#features~0.offset=27670116110564327478, ~#id_table~0.base=27670116110564327428, ~#id_table~0.offset=27670116110564327477, ~#virtblk_fops~0.base=27670116110564327434, ~#virtblk_fops~0.offset=27670116110564327474, ~#virtio_blk~0.base=27670116110564327444, ~#virtio_blk~0.offset=27670116110564327458, ~__mod_virtio_device_table~0.device=27670116110564327430, ~__mod_virtio_device_table~0.vendor=27670116110564327432, ~index~0=27670116110564327449, ~ldv_blk_rq~0=27670116110564327471, ~LDV_IN_INTERRUPT~0=27670116110564327447, ~major~0=27670116110564327466] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3325] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28); [L4142] call #t~string289.base, #t~string289.offset := #Ultimate.alloc(22); [L4146] call #t~string292.base, #t~string292.offset := #Ultimate.alloc(9); [L4180] call #t~string306.base, #t~string306.offset := #Ultimate.alloc(5); [L4180] call write~init~int(118, #t~string306.base, #t~string306.offset, 1); [L4180] call write~init~int(100, #t~string306.base, 1 + #t~string306.offset, 1); [L4180] call write~init~int(37, #t~string306.base, 2 + #t~string306.offset, 1); [L4180] call write~init~int(99, #t~string306.base, 3 + #t~string306.offset, 1); [L4180] call write~init~int(0, #t~string306.base, 4 + #t~string306.offset, 1); [L4183] call #t~string309.base, #t~string309.offset := #Ultimate.alloc(7); [L4183] call write~init~int(118, #t~string309.base, #t~string309.offset, 1); [L4183] call write~init~int(100, #t~string309.base, 1 + #t~string309.offset, 1); [L4183] call write~init~int(37, #t~string309.base, 2 + #t~string309.offset, 1); [L4183] call write~init~int(99, #t~string309.base, 3 + #t~string309.offset, 1); [L4183] call write~init~int(37, #t~string309.base, 4 + #t~string309.offset, 1); [L4183] call write~init~int(99, #t~string309.base, 5 + #t~string309.offset, 1); [L4183] call write~init~int(0, #t~string309.base, 6 + #t~string309.offset, 1); [L4188] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(9); [L4303] call #t~string387.base, #t~string387.offset := #Ultimate.alloc(11); [L4310] call #t~string388.base, #t~string388.offset := #Ultimate.alloc(8); [L4325] call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36); [L4299-L4302] call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4); [L4299-L4302] call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8); [L4297-L4298] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16); [L4297-L4298] call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4); [L4303-L4304] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141); [L4303-L4304] call write~init~$Pointer$(#t~string387.base, #t~string387.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8); [L4330] ~__mod_virtio_device_table~0.device := 0; [L4330] ~__mod_virtio_device_table~0.vendor := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(#NULL.base)=27670116110564327452, old(#NULL.offset)=27670116110564327472, old(#t~string108.base)=27670116110564327435, old(#t~string108.offset)=27670116110564327469, old(#t~string289.base)=27670116110564327480, old(#t~string289.offset)=27670116110564327482, old(#t~string292.base)=27670116110564327429, old(#t~string292.offset)=27670116110564327465, old(#t~string306.base)=27670116110564327483, old(#t~string306.offset)=27670116110564327427, old(#t~string309.base)=27670116110564327462, old(#t~string309.offset)=27670116110564327446, old(#t~string312.base)=27670116110564327454, old(#t~string312.offset)=27670116110564327438, old(#t~string387.base)=27670116110564327442, old(#t~string387.offset)=27670116110564327459, old(#t~string388.base)=27670116110564327431, old(#t~string388.offset)=27670116110564327443, old(#t~string391.base)=27670116110564327453, old(#t~string391.offset)=27670116110564327473, old(~#features~0.base)=27670116110564327456, old(~#features~0.offset)=27670116110564327478, old(~#id_table~0.base)=27670116110564327428, old(~#id_table~0.offset)=27670116110564327477, old(~#virtblk_fops~0.base)=27670116110564327434, old(~#virtblk_fops~0.offset)=27670116110564327474, old(~#virtio_blk~0.base)=27670116110564327444, old(~#virtio_blk~0.offset)=27670116110564327458, old(~__mod_virtio_device_table~0.device)=27670116110564327430, old(~__mod_virtio_device_table~0.vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(#NULL.base)=27670116110564327452, old(#NULL.offset)=27670116110564327472, old(#t~string108.base)=27670116110564327435, old(#t~string108.offset)=27670116110564327469, old(#t~string289.base)=27670116110564327480, old(#t~string289.offset)=27670116110564327482, old(#t~string292.base)=27670116110564327429, old(#t~string292.offset)=27670116110564327465, old(#t~string306.base)=27670116110564327483, old(#t~string306.offset)=27670116110564327427, old(#t~string309.base)=27670116110564327462, old(#t~string309.offset)=27670116110564327446, old(#t~string312.base)=27670116110564327454, old(#t~string312.offset)=27670116110564327438, old(#t~string387.base)=27670116110564327442, old(#t~string387.offset)=27670116110564327459, old(#t~string388.base)=27670116110564327431, old(#t~string388.offset)=27670116110564327443, old(#t~string391.base)=27670116110564327453, old(#t~string391.offset)=27670116110564327473, old(~#features~0.base)=27670116110564327456, old(~#features~0.offset)=27670116110564327478, old(~#id_table~0.base)=27670116110564327428, old(~#id_table~0.offset)=27670116110564327477, old(~#virtblk_fops~0.base)=27670116110564327434, old(~#virtblk_fops~0.offset)=27670116110564327474, old(~#virtio_blk~0.base)=27670116110564327444, old(~#virtio_blk~0.offset)=27670116110564327458, old(~__mod_virtio_device_table~0.device)=27670116110564327430, old(~__mod_virtio_device_table~0.vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] CALL call #t~ret405 := main(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [L4338] havoc ~var_group1~0.base, ~var_group1~0.offset; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0.base, ~var_group2~0.offset; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] call ldv_initialize(); [L4350] call ldv_handler_precall(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] CALL call #t~ret392 := init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4307] havoc ~tmp~20; [L4310] call #t~ret389 := register_blkdev(0, #t~string388.base, #t~string388.offset); [L4310] assume -2147483648 <= #t~ret389 && #t~ret389 <= 2147483647; [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4311-L4315] assume !(~major~0 < 0); [L4316] call #t~ret390 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4316] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~20=0] [L4305-L4319] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~20=0] [L4351] RET call #t~ret392 := init(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret392=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4352-L4356] assume !(0 != ~tmp~21); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4375-L4379] assume 0 != ~tmp___1~8; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4359] assume -2147483648 <= #t~nondet393 && #t~nondet393 <= 2147483647; [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0 == ~tmp___0~13; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4361] assume #t~switch394; [L4362] call ldv_handler_precall(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4009-L4056] ~bdev.base, ~bdev.offset := #in~bdev.base, #in~bdev.offset; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0.base, ~disk~0.offset; [L4013] havoc ~vblk~3.base, ~vblk~3.offset; [L4014] havoc ~usr_data~0.base, ~usr_data~0.offset; [L4015] call ~#id_str~0.base, ~#id_str~0.offset := #Ultimate.alloc(20); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] call #t~mem264.base, #t~mem264.offset := read~$Pointer$(~bdev.base, 240 + ~bdev.offset, 8); [L4023] ~disk~0.base, ~disk~0.offset := #t~mem264.base, #t~mem264.offset; [L4023] havoc #t~mem264.base, #t~mem264.offset; [L4024] call #t~mem265.base, #t~mem265.offset := read~$Pointer$(~disk~0.base, 1075 + ~disk~0.offset, 8); [L4024] ~vblk~3.base, ~vblk~3.offset := #t~mem265.base, #t~mem265.offset; [L4024] havoc #t~mem265.base, #t~mem265.offset; VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4025-L4041] assume 1447184708 == ~cmd % 4294967296; [L4026] ~usr_data~0.base, ~usr_data~0.offset := 0, (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3974-L4008] ~disk.base, ~disk.offset := #in~disk.base, #in~disk.offset; [L3974-L4008] ~id_str.base, ~id_str.offset := #in~id_str.base, #in~id_str.offset; [L3976] havoc ~vblk~2.base, ~vblk~2.offset; [L3977] havoc ~req~1.base, ~req~1.offset; [L3978] havoc ~bio~0.base, ~bio~0.offset; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] call #t~mem249.base, #t~mem249.offset := read~$Pointer$(~disk.base, 1075 + ~disk.offset, 8); [L3986] ~vblk~2.base, ~vblk~2.offset := #t~mem249.base, #t~mem249.offset; [L3986] havoc #t~mem249.base, #t~mem249.offset; [L3987] call #t~mem250.base, #t~mem250.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8); [L3987] call #t~mem251.base, #t~mem251.offset := read~$Pointer$(#t~mem250.base, 1067 + #t~mem250.offset, 8); [L3987] call #t~ret252.base, #t~ret252.offset := bio_map_kern(#t~mem251.base, #t~mem251.offset, ~id_str.base, ~id_str.offset, 20, 208); [L3987] ~bio~0.base, ~bio~0.offset := #t~ret252.base, #t~ret252.offset; [L3987] havoc #t~mem250.base, #t~mem250.offset; [L3987] havoc #t~mem251.base, #t~mem251.offset; [L3987] havoc #t~ret252.base, #t~ret252.offset; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L3510] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret400=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3120] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3988] RET call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret253=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3988] assume -9223372036854775808 <= #t~ret253 && #t~ret253 <= 9223372036854775807; [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3989-L3994] assume !(0 != ~tmp___0~9); [L3995] call #t~mem255.base, #t~mem255.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8); [L3995] call #t~mem256.base, #t~mem256.offset := read~$Pointer$(#t~mem255.base, 1067 + #t~mem255.offset, 8); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem255.base=27670116110564327433, #t~mem255.offset=0, #t~mem256.base=27670116110564327464, #t~mem256.offset=27670116110564327468, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3995] CALL call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208); VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4415-L4427] ~ldv_func_arg1.base, ~ldv_func_arg1.offset := #in~ldv_func_arg1.base, #in~ldv_func_arg1.offset; [L4415-L4427] ~ldv_func_arg2.base, ~ldv_func_arg2.offset := #in~ldv_func_arg2.base, #in~ldv_func_arg2.offset; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0.base, ~ldv_func_res~0.offset; [L4419] havoc ~tmp~25.base, ~tmp~25.offset; [L4422] call #t~ret401.base, #t~ret401.offset := blk_make_request(~ldv_func_arg1.base, ~ldv_func_arg1.offset, ~ldv_func_arg2.base, ~ldv_func_arg2.offset, ~ldv_func_arg3); [L4422] ~tmp~25.base, ~tmp~25.offset := #t~ret401.base, #t~ret401.offset; [L4422] havoc #t~ret401.base, #t~ret401.offset; [L4423] ~ldv_func_res~0.base, ~ldv_func_res~0.offset := ~tmp~25.base, ~tmp~25.offset; VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~ldv_func_arg1.base=27670116110564327464, ~ldv_func_arg1.offset=27670116110564327468, ~ldv_func_arg2.base=0, ~ldv_func_arg2.offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0.base=0, ~ldv_func_res~0.offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25.base=0, ~tmp~25.offset=0] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4497-L4522] ~res.base, ~res.offset := #in~res.base, #in~res.offset; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res.base=0, ~res.offset=0] [L4502-L4506] assume 0 == ~ldv_blk_rq~0; VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res.base=0, ~res.offset=0] [L4507-L4519] assume (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296; [L4508] ~ldv_blk_rq~0 := 1; VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res.base=0, ~res.offset=0] [L3298] ensures true; VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res.base=0, ~res.offset=0] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1.base=27670116110564327464, ~ldv_func_arg1.offset=27670116110564327468, ~ldv_func_arg2.base=0, ~ldv_func_arg2.offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0.base=0, ~ldv_func_res~0.offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25.base=0, ~tmp~25.offset=0] [L4425] #res.base, #res.offset := ~ldv_func_res~0.base, ~ldv_func_res~0.offset; VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1.base=27670116110564327464, ~ldv_func_arg1.offset=27670116110564327468, ~ldv_func_arg2.base=0, ~ldv_func_arg2.offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0.base=0, ~ldv_func_res~0.offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25.base=0, ~tmp~25.offset=0] [L3252-L3253] ensures true; VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1.base=27670116110564327464, ~ldv_func_arg1.offset=27670116110564327468, ~ldv_func_arg2.base=0, ~ldv_func_arg2.offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0.base=0, ~ldv_func_res~0.offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25.base=0, ~tmp~25.offset=0] [L3995] RET call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem255.base=27670116110564327433, #t~mem255.offset=0, #t~mem256.base=27670116110564327464, #t~mem256.offset=27670116110564327468, #t~ret257.base=0, #t~ret257.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3995] ~req~1.base, ~req~1.offset := #t~ret257.base, #t~ret257.offset; [L3995] havoc #t~ret257.base, #t~ret257.offset; [L3995] havoc #t~mem256.base, #t~mem256.offset; [L3995] havoc #t~mem255.base, #t~mem255.offset; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3996] CALL call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L3510] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret400=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3120] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3996] RET call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret258=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3996] assume -9223372036854775808 <= #t~ret258 && #t~ret258 <= 9223372036854775807; [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3997-L4003] assume !(0 != ~tmp___2~1); [L4004] call write~int(7, ~req~1.base, 64 + ~req~1.offset, 4); [L4005] call #t~mem260.base, #t~mem260.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8); [L4005] call #t~mem261.base, #t~mem261.offset := read~$Pointer$(#t~mem260.base, 1067 + #t~mem260.offset, 8); [L4005] call #t~mem262.base, #t~mem262.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8); [L4005] call #t~ret263 := blk_execute_rq(#t~mem261.base, #t~mem261.offset, #t~mem262.base, #t~mem262.offset, ~req~1.base, ~req~1.offset, 0); [L4005] assume -2147483648 <= #t~ret263 && #t~ret263 <= 2147483647; [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~mem261.base, #t~mem261.offset; [L4005] havoc #t~mem262.base, #t~mem262.offset; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260.base, #t~mem260.offset; [L4006] #res := ~tmp___3~1; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #res=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~tmp___3~1=13, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3974-L4008] ensures true; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #res=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~tmp___3~1=13, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~ret266=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4027] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4028-L4037] assume !(0 == ~err~1); VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4038] #res := ~err~1; [L4015] call ULTIMATE.dealloc(~#id_str~0.base, ~#id_str~0.offset); [L4038] havoc ~#id_str~0.base, ~#id_str~0.offset; VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #res=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4009-L4056] ensures true; VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #res=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL.base=0, #NULL.offset=0, #t~ret395=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4363] assume -2147483648 <= #t~ret395 && #t~ret395 <= 2147483647; [L4363] havoc #t~ret395; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4375-L4379] assume !(0 != ~tmp___1~8); [L4381] call ldv_handler_precall(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4382] CALL call fini(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4325] call unregister_blkdev(~major~0, #t~string391.base, #t~string391.offset); [L4326] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4320-L4329] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4382] RET call fini(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4384] CALL call ldv_check_final_state(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4542-L4546] assume !(0 == ~ldv_blk_rq~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4545] CALL call ldv_error(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4433] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=27670116110564327452, #NULL.offset=27670116110564327472, #t~string108.base=27670116110564327435, #t~string108.offset=27670116110564327469, #t~string289.base=27670116110564327480, #t~string289.offset=27670116110564327482, #t~string292.base=27670116110564327429, #t~string292.offset=27670116110564327465, #t~string306.base=27670116110564327483, #t~string306.offset=27670116110564327427, #t~string309.base=27670116110564327462, #t~string309.offset=27670116110564327446, #t~string312.base=27670116110564327454, #t~string312.offset=27670116110564327438, #t~string387.base=27670116110564327442, #t~string387.offset=27670116110564327459, #t~string388.base=27670116110564327431, #t~string388.offset=27670116110564327443, #t~string391.base=27670116110564327453, #t~string391.offset=27670116110564327473, old(#NULL.base)=27670116110564327452, old(#NULL.offset)=27670116110564327472, old(#t~string108.base)=27670116110564327435, old(#t~string108.offset)=27670116110564327469, old(#t~string289.base)=27670116110564327480, old(#t~string289.offset)=27670116110564327482, old(#t~string292.base)=27670116110564327429, old(#t~string292.offset)=27670116110564327465, old(#t~string306.base)=27670116110564327483, old(#t~string306.offset)=27670116110564327427, old(#t~string309.base)=27670116110564327462, old(#t~string309.offset)=27670116110564327446, old(#t~string312.base)=27670116110564327454, old(#t~string312.offset)=27670116110564327438, old(#t~string387.base)=27670116110564327442, old(#t~string387.offset)=27670116110564327459, old(#t~string388.base)=27670116110564327431, old(#t~string388.offset)=27670116110564327443, old(#t~string391.base)=27670116110564327453, old(#t~string391.offset)=27670116110564327473, old(~#features~0.base)=27670116110564327456, old(~#features~0.offset)=27670116110564327478, old(~#id_table~0.base)=27670116110564327428, old(~#id_table~0.offset)=27670116110564327477, old(~#virtblk_fops~0.base)=27670116110564327434, old(~#virtblk_fops~0.offset)=27670116110564327474, old(~#virtio_blk~0.base)=27670116110564327444, old(~#virtio_blk~0.offset)=27670116110564327458, old(~__mod_virtio_device_table~0.device)=27670116110564327430, old(~__mod_virtio_device_table~0.vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#features~0.base=27670116110564327456, ~#features~0.offset=27670116110564327478, ~#id_table~0.base=27670116110564327428, ~#id_table~0.offset=27670116110564327477, ~#virtblk_fops~0.base=27670116110564327434, ~#virtblk_fops~0.offset=27670116110564327474, ~#virtio_blk~0.base=27670116110564327444, ~#virtio_blk~0.offset=27670116110564327458, ~__mod_virtio_device_table~0.device=27670116110564327430, ~__mod_virtio_device_table~0.vendor=27670116110564327432, ~index~0=27670116110564327449, ~ldv_blk_rq~0=27670116110564327471, ~LDV_IN_INTERRUPT~0=27670116110564327447, ~major~0=27670116110564327466] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3325] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28); [L4142] call #t~string289.base, #t~string289.offset := #Ultimate.alloc(22); [L4146] call #t~string292.base, #t~string292.offset := #Ultimate.alloc(9); [L4180] call #t~string306.base, #t~string306.offset := #Ultimate.alloc(5); [L4180] call write~init~int(118, #t~string306.base, #t~string306.offset, 1); [L4180] call write~init~int(100, #t~string306.base, 1 + #t~string306.offset, 1); [L4180] call write~init~int(37, #t~string306.base, 2 + #t~string306.offset, 1); [L4180] call write~init~int(99, #t~string306.base, 3 + #t~string306.offset, 1); [L4180] call write~init~int(0, #t~string306.base, 4 + #t~string306.offset, 1); [L4183] call #t~string309.base, #t~string309.offset := #Ultimate.alloc(7); [L4183] call write~init~int(118, #t~string309.base, #t~string309.offset, 1); [L4183] call write~init~int(100, #t~string309.base, 1 + #t~string309.offset, 1); [L4183] call write~init~int(37, #t~string309.base, 2 + #t~string309.offset, 1); [L4183] call write~init~int(99, #t~string309.base, 3 + #t~string309.offset, 1); [L4183] call write~init~int(37, #t~string309.base, 4 + #t~string309.offset, 1); [L4183] call write~init~int(99, #t~string309.base, 5 + #t~string309.offset, 1); [L4183] call write~init~int(0, #t~string309.base, 6 + #t~string309.offset, 1); [L4188] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(9); [L4303] call #t~string387.base, #t~string387.offset := #Ultimate.alloc(11); [L4310] call #t~string388.base, #t~string388.offset := #Ultimate.alloc(8); [L4325] call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36); [L4299-L4302] call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4); [L4299-L4302] call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8); [L4297-L4298] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16); [L4297-L4298] call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4); [L4303-L4304] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141); [L4303-L4304] call write~init~$Pointer$(#t~string387.base, #t~string387.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8); [L4330] ~__mod_virtio_device_table~0.device := 0; [L4330] ~__mod_virtio_device_table~0.vendor := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(#NULL.base)=27670116110564327452, old(#NULL.offset)=27670116110564327472, old(#t~string108.base)=27670116110564327435, old(#t~string108.offset)=27670116110564327469, old(#t~string289.base)=27670116110564327480, old(#t~string289.offset)=27670116110564327482, old(#t~string292.base)=27670116110564327429, old(#t~string292.offset)=27670116110564327465, old(#t~string306.base)=27670116110564327483, old(#t~string306.offset)=27670116110564327427, old(#t~string309.base)=27670116110564327462, old(#t~string309.offset)=27670116110564327446, old(#t~string312.base)=27670116110564327454, old(#t~string312.offset)=27670116110564327438, old(#t~string387.base)=27670116110564327442, old(#t~string387.offset)=27670116110564327459, old(#t~string388.base)=27670116110564327431, old(#t~string388.offset)=27670116110564327443, old(#t~string391.base)=27670116110564327453, old(#t~string391.offset)=27670116110564327473, old(~#features~0.base)=27670116110564327456, old(~#features~0.offset)=27670116110564327478, old(~#id_table~0.base)=27670116110564327428, old(~#id_table~0.offset)=27670116110564327477, old(~#virtblk_fops~0.base)=27670116110564327434, old(~#virtblk_fops~0.offset)=27670116110564327474, old(~#virtio_blk~0.base)=27670116110564327444, old(~#virtio_blk~0.offset)=27670116110564327458, old(~__mod_virtio_device_table~0.device)=27670116110564327430, old(~__mod_virtio_device_table~0.vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(#NULL.base)=27670116110564327452, old(#NULL.offset)=27670116110564327472, old(#t~string108.base)=27670116110564327435, old(#t~string108.offset)=27670116110564327469, old(#t~string289.base)=27670116110564327480, old(#t~string289.offset)=27670116110564327482, old(#t~string292.base)=27670116110564327429, old(#t~string292.offset)=27670116110564327465, old(#t~string306.base)=27670116110564327483, old(#t~string306.offset)=27670116110564327427, old(#t~string309.base)=27670116110564327462, old(#t~string309.offset)=27670116110564327446, old(#t~string312.base)=27670116110564327454, old(#t~string312.offset)=27670116110564327438, old(#t~string387.base)=27670116110564327442, old(#t~string387.offset)=27670116110564327459, old(#t~string388.base)=27670116110564327431, old(#t~string388.offset)=27670116110564327443, old(#t~string391.base)=27670116110564327453, old(#t~string391.offset)=27670116110564327473, old(~#features~0.base)=27670116110564327456, old(~#features~0.offset)=27670116110564327478, old(~#id_table~0.base)=27670116110564327428, old(~#id_table~0.offset)=27670116110564327477, old(~#virtblk_fops~0.base)=27670116110564327434, old(~#virtblk_fops~0.offset)=27670116110564327474, old(~#virtio_blk~0.base)=27670116110564327444, old(~#virtio_blk~0.offset)=27670116110564327458, old(~__mod_virtio_device_table~0.device)=27670116110564327430, old(~__mod_virtio_device_table~0.vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] CALL call #t~ret405 := main(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [L4338] havoc ~var_group1~0.base, ~var_group1~0.offset; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0.base, ~var_group2~0.offset; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] call ldv_initialize(); [L4350] call ldv_handler_precall(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] CALL call #t~ret392 := init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4307] havoc ~tmp~20; [L4310] call #t~ret389 := register_blkdev(0, #t~string388.base, #t~string388.offset); [L4310] assume -2147483648 <= #t~ret389 && #t~ret389 <= 2147483647; [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4311-L4315] assume !(~major~0 < 0); [L4316] call #t~ret390 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4316] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~20=0] [L4305-L4319] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~20=0] [L4351] RET call #t~ret392 := init(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret392=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4352-L4356] assume !(0 != ~tmp~21); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4375-L4379] assume 0 != ~tmp___1~8; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4359] assume -2147483648 <= #t~nondet393 && #t~nondet393 <= 2147483647; [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0 == ~tmp___0~13; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4361] assume #t~switch394; [L4362] call ldv_handler_precall(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4009-L4056] ~bdev.base, ~bdev.offset := #in~bdev.base, #in~bdev.offset; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0.base, ~disk~0.offset; [L4013] havoc ~vblk~3.base, ~vblk~3.offset; [L4014] havoc ~usr_data~0.base, ~usr_data~0.offset; [L4015] call ~#id_str~0.base, ~#id_str~0.offset := #Ultimate.alloc(20); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] call #t~mem264.base, #t~mem264.offset := read~$Pointer$(~bdev.base, 240 + ~bdev.offset, 8); [L4023] ~disk~0.base, ~disk~0.offset := #t~mem264.base, #t~mem264.offset; [L4023] havoc #t~mem264.base, #t~mem264.offset; [L4024] call #t~mem265.base, #t~mem265.offset := read~$Pointer$(~disk~0.base, 1075 + ~disk~0.offset, 8); [L4024] ~vblk~3.base, ~vblk~3.offset := #t~mem265.base, #t~mem265.offset; [L4024] havoc #t~mem265.base, #t~mem265.offset; VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4025-L4041] assume 1447184708 == ~cmd % 4294967296; [L4026] ~usr_data~0.base, ~usr_data~0.offset := 0, (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3974-L4008] ~disk.base, ~disk.offset := #in~disk.base, #in~disk.offset; [L3974-L4008] ~id_str.base, ~id_str.offset := #in~id_str.base, #in~id_str.offset; [L3976] havoc ~vblk~2.base, ~vblk~2.offset; [L3977] havoc ~req~1.base, ~req~1.offset; [L3978] havoc ~bio~0.base, ~bio~0.offset; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] call #t~mem249.base, #t~mem249.offset := read~$Pointer$(~disk.base, 1075 + ~disk.offset, 8); [L3986] ~vblk~2.base, ~vblk~2.offset := #t~mem249.base, #t~mem249.offset; [L3986] havoc #t~mem249.base, #t~mem249.offset; [L3987] call #t~mem250.base, #t~mem250.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8); [L3987] call #t~mem251.base, #t~mem251.offset := read~$Pointer$(#t~mem250.base, 1067 + #t~mem250.offset, 8); [L3987] call #t~ret252.base, #t~ret252.offset := bio_map_kern(#t~mem251.base, #t~mem251.offset, ~id_str.base, ~id_str.offset, 20, 208); [L3987] ~bio~0.base, ~bio~0.offset := #t~ret252.base, #t~ret252.offset; [L3987] havoc #t~mem250.base, #t~mem250.offset; [L3987] havoc #t~mem251.base, #t~mem251.offset; [L3987] havoc #t~ret252.base, #t~ret252.offset; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L3510] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret400=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3120] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3988] RET call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret253=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3988] assume -9223372036854775808 <= #t~ret253 && #t~ret253 <= 9223372036854775807; [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3989-L3994] assume !(0 != ~tmp___0~9); [L3995] call #t~mem255.base, #t~mem255.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8); [L3995] call #t~mem256.base, #t~mem256.offset := read~$Pointer$(#t~mem255.base, 1067 + #t~mem255.offset, 8); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem255.base=27670116110564327433, #t~mem255.offset=0, #t~mem256.base=27670116110564327464, #t~mem256.offset=27670116110564327468, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3995] CALL call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208); VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4415-L4427] ~ldv_func_arg1.base, ~ldv_func_arg1.offset := #in~ldv_func_arg1.base, #in~ldv_func_arg1.offset; [L4415-L4427] ~ldv_func_arg2.base, ~ldv_func_arg2.offset := #in~ldv_func_arg2.base, #in~ldv_func_arg2.offset; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0.base, ~ldv_func_res~0.offset; [L4419] havoc ~tmp~25.base, ~tmp~25.offset; [L4422] call #t~ret401.base, #t~ret401.offset := blk_make_request(~ldv_func_arg1.base, ~ldv_func_arg1.offset, ~ldv_func_arg2.base, ~ldv_func_arg2.offset, ~ldv_func_arg3); [L4422] ~tmp~25.base, ~tmp~25.offset := #t~ret401.base, #t~ret401.offset; [L4422] havoc #t~ret401.base, #t~ret401.offset; [L4423] ~ldv_func_res~0.base, ~ldv_func_res~0.offset := ~tmp~25.base, ~tmp~25.offset; VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~ldv_func_arg1.base=27670116110564327464, ~ldv_func_arg1.offset=27670116110564327468, ~ldv_func_arg2.base=0, ~ldv_func_arg2.offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0.base=0, ~ldv_func_res~0.offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25.base=0, ~tmp~25.offset=0] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4497-L4522] ~res.base, ~res.offset := #in~res.base, #in~res.offset; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res.base=0, ~res.offset=0] [L4502-L4506] assume 0 == ~ldv_blk_rq~0; VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res.base=0, ~res.offset=0] [L4507-L4519] assume (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296; [L4508] ~ldv_blk_rq~0 := 1; VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res.base=0, ~res.offset=0] [L3298] ensures true; VAL [#in~mask=208, #in~res.base=0, #in~res.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res.base=0, ~res.offset=0] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1.base=27670116110564327464, ~ldv_func_arg1.offset=27670116110564327468, ~ldv_func_arg2.base=0, ~ldv_func_arg2.offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0.base=0, ~ldv_func_res~0.offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25.base=0, ~tmp~25.offset=0] [L4425] #res.base, #res.offset := ~ldv_func_res~0.base, ~ldv_func_res~0.offset; VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1.base=27670116110564327464, ~ldv_func_arg1.offset=27670116110564327468, ~ldv_func_arg2.base=0, ~ldv_func_arg2.offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0.base=0, ~ldv_func_res~0.offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25.base=0, ~tmp~25.offset=0] [L3252-L3253] ensures true; VAL [#in~ldv_func_arg1.base=27670116110564327464, #in~ldv_func_arg1.offset=27670116110564327468, #in~ldv_func_arg2.base=0, #in~ldv_func_arg2.offset=0, #in~ldv_func_arg3=208, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1.base=27670116110564327464, ~ldv_func_arg1.offset=27670116110564327468, ~ldv_func_arg2.base=0, ~ldv_func_arg2.offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0.base=0, ~ldv_func_res~0.offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25.base=0, ~tmp~25.offset=0] [L3995] RET call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem255.base=27670116110564327433, #t~mem255.offset=0, #t~mem256.base=27670116110564327464, #t~mem256.offset=27670116110564327468, #t~ret257.base=0, #t~ret257.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3995] ~req~1.base, ~req~1.offset := #t~ret257.base, #t~ret257.offset; [L3995] havoc #t~ret257.base, #t~ret257.offset; [L3995] havoc #t~mem256.base, #t~mem256.offset; [L3995] havoc #t~mem255.base, #t~mem255.offset; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3996] CALL call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L3510] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret400=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3120] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3996] RET call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret258=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3996] assume -9223372036854775808 <= #t~ret258 && #t~ret258 <= 9223372036854775807; [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3997-L4003] assume !(0 != ~tmp___2~1); [L4004] call write~int(7, ~req~1.base, 64 + ~req~1.offset, 4); [L4005] call #t~mem260.base, #t~mem260.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8); [L4005] call #t~mem261.base, #t~mem261.offset := read~$Pointer$(#t~mem260.base, 1067 + #t~mem260.offset, 8); [L4005] call #t~mem262.base, #t~mem262.offset := read~$Pointer$(~vblk~2.base, 72 + ~vblk~2.offset, 8); [L4005] call #t~ret263 := blk_execute_rq(#t~mem261.base, #t~mem261.offset, #t~mem262.base, #t~mem262.offset, ~req~1.base, ~req~1.offset, 0); [L4005] assume -2147483648 <= #t~ret263 && #t~ret263 <= 2147483647; [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~mem261.base, #t~mem261.offset; [L4005] havoc #t~mem262.base, #t~mem262.offset; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260.base, #t~mem260.offset; [L4006] #res := ~tmp___3~1; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #res=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~tmp___3~1=13, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L3974-L4008] ensures true; VAL [#in~disk.base=27670116110564327426, #in~disk.offset=0, #in~id_str.base=27670116110564327457, #in~id_str.offset=0, #NULL.base=0, #NULL.offset=0, #res=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bio~0.base=0, ~bio~0.offset=0, ~disk.base=27670116110564327426, ~disk.offset=0, ~id_str.base=27670116110564327457, ~id_str.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1.base=0, ~req~1.offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~tmp___3~1=13, ~vblk~2.base=27670116110564327450, ~vblk~2.offset=0] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~ret266=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4027] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4028-L4037] assume !(0 == ~err~1); VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_str~0.base=27670116110564327457, ~#id_str~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4038] #res := ~err~1; [L4015] call ULTIMATE.dealloc(~#id_str~0.base, ~#id_str~0.offset); [L4038] havoc ~#id_str~0.base, ~#id_str~0.offset; VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #res=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4009-L4056] ensures true; VAL [#in~bdev.base=27670116110564327460, #in~bdev.offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL.base=0, #NULL.offset=0, #res=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~bdev.base=27670116110564327460, ~bdev.offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0.base=27670116110564327426, ~disk~0.offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0.base=0, ~usr_data~0.offset=-9223372036854775808, ~vblk~3.base=27670116110564327450, ~vblk~3.offset=0] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL.base=0, #NULL.offset=0, #t~ret395=13, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4363] assume -2147483648 <= #t~ret395 && #t~ret395 <= 2147483647; [L4363] havoc #t~ret395; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4375-L4379] assume !(0 != ~tmp___1~8); [L4381] call ldv_handler_precall(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4382] CALL call fini(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4325] call unregister_blkdev(~major~0, #t~string391.base, #t~string391.offset); [L4326] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4320-L4329] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4382] RET call fini(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0.base=27670116110564327460, ~var_group1~0.offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4384] CALL call ldv_check_final_state(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4542-L4546] assume !(0 == ~ldv_blk_rq~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4545] CALL call ldv_error(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4433] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=27670116110564327440, #t~string108.offset=0, #t~string289.base=27670116110564327479, #t~string289.offset=0, #t~string292.base=27670116110564327425, #t~string292.offset=0, #t~string306.base=27670116110564327481, #t~string306.offset=0, #t~string309.base=27670116110564327461, #t~string309.offset=0, #t~string312.base=27670116110564327455, #t~string312.offset=0, #t~string387.base=27670116110564327441, #t~string387.offset=0, #t~string388.base=27670116110564327436, #t~string388.offset=0, #t~string391.base=27670116110564327451, #t~string391.offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0.base=27670116110564327463, ~#__this_module~0.offset=27670116110564327467, ~#features~0.base=27670116110564327470, ~#features~0.offset=0, ~#id_table~0.base=27670116110564327448, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27670116110564327437, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=27670116110564327445, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=27670116110564327452, #NULL!offset=27670116110564327472, #t~string108!base=27670116110564327435, #t~string108!offset=27670116110564327469, #t~string289!base=27670116110564327480, #t~string289!offset=27670116110564327482, #t~string292!base=27670116110564327429, #t~string292!offset=27670116110564327465, #t~string306!base=27670116110564327483, #t~string306!offset=27670116110564327427, #t~string309!base=27670116110564327462, #t~string309!offset=27670116110564327446, #t~string312!base=27670116110564327454, #t~string312!offset=27670116110564327438, #t~string387!base=27670116110564327442, #t~string387!offset=27670116110564327459, #t~string388!base=27670116110564327431, #t~string388!offset=27670116110564327443, #t~string391!base=27670116110564327453, #t~string391!offset=27670116110564327473, old(#NULL!base)=27670116110564327452, old(#NULL!offset)=27670116110564327472, old(#t~string108!base)=27670116110564327435, old(#t~string108!offset)=27670116110564327469, old(#t~string289!base)=27670116110564327480, old(#t~string289!offset)=27670116110564327482, old(#t~string292!base)=27670116110564327429, old(#t~string292!offset)=27670116110564327465, old(#t~string306!base)=27670116110564327483, old(#t~string306!offset)=27670116110564327427, old(#t~string309!base)=27670116110564327462, old(#t~string309!offset)=27670116110564327446, old(#t~string312!base)=27670116110564327454, old(#t~string312!offset)=27670116110564327438, old(#t~string387!base)=27670116110564327442, old(#t~string387!offset)=27670116110564327459, old(#t~string388!base)=27670116110564327431, old(#t~string388!offset)=27670116110564327443, old(#t~string391!base)=27670116110564327453, old(#t~string391!offset)=27670116110564327473, old(~#features~0!base)=27670116110564327456, old(~#features~0!offset)=27670116110564327478, old(~#id_table~0!base)=27670116110564327428, old(~#id_table~0!offset)=27670116110564327477, old(~#virtblk_fops~0!base)=27670116110564327434, old(~#virtblk_fops~0!offset)=27670116110564327474, old(~#virtio_blk~0!base)=27670116110564327444, old(~#virtio_blk~0!offset)=27670116110564327458, old(~__mod_virtio_device_table~0!device)=27670116110564327430, old(~__mod_virtio_device_table~0!vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#features~0!base=27670116110564327456, ~#features~0!offset=27670116110564327478, ~#id_table~0!base=27670116110564327428, ~#id_table~0!offset=27670116110564327477, ~#virtblk_fops~0!base=27670116110564327434, ~#virtblk_fops~0!offset=27670116110564327474, ~#virtio_blk~0!base=27670116110564327444, ~#virtio_blk~0!offset=27670116110564327458, ~__mod_virtio_device_table~0!device=27670116110564327430, ~__mod_virtio_device_table~0!vendor=27670116110564327432, ~index~0=27670116110564327449, ~ldv_blk_rq~0=27670116110564327471, ~LDV_IN_INTERRUPT~0=27670116110564327447, ~major~0=27670116110564327466] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5); [L4180] FCALL call write~init~int(118, { base: #t~string306!base, offset: #t~string306!offset }, 1); [L4180] FCALL call write~init~int(100, { base: #t~string306!base, offset: 1 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(37, { base: #t~string306!base, offset: 2 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(99, { base: #t~string306!base, offset: 3 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(0, { base: #t~string306!base, offset: 4 + #t~string306!offset }, 1); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7); [L4183] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4183] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 5 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(0, { base: #t~string309!base, offset: 6 + #t~string309!offset }, 1); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4299-L4302] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4297-L4298] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4330] ~__mod_virtio_device_table~0!device := 0; [L4330] ~__mod_virtio_device_table~0!vendor := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(#NULL!base)=27670116110564327452, old(#NULL!offset)=27670116110564327472, old(#t~string108!base)=27670116110564327435, old(#t~string108!offset)=27670116110564327469, old(#t~string289!base)=27670116110564327480, old(#t~string289!offset)=27670116110564327482, old(#t~string292!base)=27670116110564327429, old(#t~string292!offset)=27670116110564327465, old(#t~string306!base)=27670116110564327483, old(#t~string306!offset)=27670116110564327427, old(#t~string309!base)=27670116110564327462, old(#t~string309!offset)=27670116110564327446, old(#t~string312!base)=27670116110564327454, old(#t~string312!offset)=27670116110564327438, old(#t~string387!base)=27670116110564327442, old(#t~string387!offset)=27670116110564327459, old(#t~string388!base)=27670116110564327431, old(#t~string388!offset)=27670116110564327443, old(#t~string391!base)=27670116110564327453, old(#t~string391!offset)=27670116110564327473, old(~#features~0!base)=27670116110564327456, old(~#features~0!offset)=27670116110564327478, old(~#id_table~0!base)=27670116110564327428, old(~#id_table~0!offset)=27670116110564327477, old(~#virtblk_fops~0!base)=27670116110564327434, old(~#virtblk_fops~0!offset)=27670116110564327474, old(~#virtio_blk~0!base)=27670116110564327444, old(~#virtio_blk~0!offset)=27670116110564327458, old(~__mod_virtio_device_table~0!device)=27670116110564327430, old(~__mod_virtio_device_table~0!vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] CALL call #t~ret405 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] CALL call #t~ret392 := init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0, #t~string388); [L4310] assume -2147483648 <= #t~ret389 && #t~ret389 <= 2147483647; [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4311] COND FALSE !(~major~0 < 0) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~20=0] [L4351] RET call #t~ret392 := init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret392=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4352] COND FALSE !(0 != ~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4375] COND TRUE 0 != ~tmp___1~8 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4359] assume -2147483648 <= #t~nondet393 && #t~nondet393 <= 2147483647; [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0 == ~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4025] COND TRUE 1447184708 == ~cmd % 4294967296 [L4026] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: 1067 + #t~mem250!offset }, 8); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20, 208); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~mem250; [L3987] havoc #t~mem251; [L3987] havoc #t~ret252; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0, ~tmp~24=0] [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret253=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3988] assume -9223372036854775808 <= #t~ret253 && #t~ret253 <= 9223372036854775807; [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3989] COND FALSE !(0 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: 1067 + #t~mem255!offset }, 8); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem255!base=27670116110564327433, #t~mem255!offset=0, #t~mem256!base=27670116110564327464, #t~mem256!offset=27670116110564327468, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3995] CALL call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208); VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4502] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4507] COND TRUE (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296 [L4508] ~ldv_blk_rq~0 := 1; VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L4425] #res := ~ldv_func_res~0; VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L3995] RET call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem255!base=27670116110564327433, #t~mem255!offset=0, #t~mem256!base=27670116110564327464, #t~mem256!offset=27670116110564327468, #t~ret257!base=0, #t~ret257!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem256; [L3995] havoc #t~mem255; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0, ~tmp~24=0] [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret258=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3996] assume -9223372036854775808 <= #t~ret258 && #t~ret258 <= 9223372036854775807; [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3997] COND FALSE !(0 != ~tmp___2~1) [L4004] FCALL call write~int(7, { base: ~req~1!base, offset: 64 + ~req~1!offset }, 4); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: 1067 + #t~mem260!offset }, 8); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0); [L4005] assume -2147483648 <= #t~ret263 && #t~ret263 <= 2147483647; [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~mem261; [L4005] havoc #t~mem262; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4006] #res := ~tmp___3~1; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #res=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~tmp___3~1=13, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~ret266=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4027] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4028] COND FALSE !(0 == ~err~1) VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #res=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret395=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4363] assume -2147483648 <= #t~ret395 && #t~ret395 <= 2147483647; [L4363] havoc #t~ret395; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4375] COND FALSE !(0 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4382] CALL call fini(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4382] RET call fini(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4384] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4542] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4545] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=27670116110564327452, #NULL!offset=27670116110564327472, #t~string108!base=27670116110564327435, #t~string108!offset=27670116110564327469, #t~string289!base=27670116110564327480, #t~string289!offset=27670116110564327482, #t~string292!base=27670116110564327429, #t~string292!offset=27670116110564327465, #t~string306!base=27670116110564327483, #t~string306!offset=27670116110564327427, #t~string309!base=27670116110564327462, #t~string309!offset=27670116110564327446, #t~string312!base=27670116110564327454, #t~string312!offset=27670116110564327438, #t~string387!base=27670116110564327442, #t~string387!offset=27670116110564327459, #t~string388!base=27670116110564327431, #t~string388!offset=27670116110564327443, #t~string391!base=27670116110564327453, #t~string391!offset=27670116110564327473, old(#NULL!base)=27670116110564327452, old(#NULL!offset)=27670116110564327472, old(#t~string108!base)=27670116110564327435, old(#t~string108!offset)=27670116110564327469, old(#t~string289!base)=27670116110564327480, old(#t~string289!offset)=27670116110564327482, old(#t~string292!base)=27670116110564327429, old(#t~string292!offset)=27670116110564327465, old(#t~string306!base)=27670116110564327483, old(#t~string306!offset)=27670116110564327427, old(#t~string309!base)=27670116110564327462, old(#t~string309!offset)=27670116110564327446, old(#t~string312!base)=27670116110564327454, old(#t~string312!offset)=27670116110564327438, old(#t~string387!base)=27670116110564327442, old(#t~string387!offset)=27670116110564327459, old(#t~string388!base)=27670116110564327431, old(#t~string388!offset)=27670116110564327443, old(#t~string391!base)=27670116110564327453, old(#t~string391!offset)=27670116110564327473, old(~#features~0!base)=27670116110564327456, old(~#features~0!offset)=27670116110564327478, old(~#id_table~0!base)=27670116110564327428, old(~#id_table~0!offset)=27670116110564327477, old(~#virtblk_fops~0!base)=27670116110564327434, old(~#virtblk_fops~0!offset)=27670116110564327474, old(~#virtio_blk~0!base)=27670116110564327444, old(~#virtio_blk~0!offset)=27670116110564327458, old(~__mod_virtio_device_table~0!device)=27670116110564327430, old(~__mod_virtio_device_table~0!vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#features~0!base=27670116110564327456, ~#features~0!offset=27670116110564327478, ~#id_table~0!base=27670116110564327428, ~#id_table~0!offset=27670116110564327477, ~#virtblk_fops~0!base=27670116110564327434, ~#virtblk_fops~0!offset=27670116110564327474, ~#virtio_blk~0!base=27670116110564327444, ~#virtio_blk~0!offset=27670116110564327458, ~__mod_virtio_device_table~0!device=27670116110564327430, ~__mod_virtio_device_table~0!vendor=27670116110564327432, ~index~0=27670116110564327449, ~ldv_blk_rq~0=27670116110564327471, ~LDV_IN_INTERRUPT~0=27670116110564327447, ~major~0=27670116110564327466] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5); [L4180] FCALL call write~init~int(118, { base: #t~string306!base, offset: #t~string306!offset }, 1); [L4180] FCALL call write~init~int(100, { base: #t~string306!base, offset: 1 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(37, { base: #t~string306!base, offset: 2 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(99, { base: #t~string306!base, offset: 3 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(0, { base: #t~string306!base, offset: 4 + #t~string306!offset }, 1); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7); [L4183] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4183] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 5 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(0, { base: #t~string309!base, offset: 6 + #t~string309!offset }, 1); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4299-L4302] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4297-L4298] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4330] ~__mod_virtio_device_table~0!device := 0; [L4330] ~__mod_virtio_device_table~0!vendor := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(#NULL!base)=27670116110564327452, old(#NULL!offset)=27670116110564327472, old(#t~string108!base)=27670116110564327435, old(#t~string108!offset)=27670116110564327469, old(#t~string289!base)=27670116110564327480, old(#t~string289!offset)=27670116110564327482, old(#t~string292!base)=27670116110564327429, old(#t~string292!offset)=27670116110564327465, old(#t~string306!base)=27670116110564327483, old(#t~string306!offset)=27670116110564327427, old(#t~string309!base)=27670116110564327462, old(#t~string309!offset)=27670116110564327446, old(#t~string312!base)=27670116110564327454, old(#t~string312!offset)=27670116110564327438, old(#t~string387!base)=27670116110564327442, old(#t~string387!offset)=27670116110564327459, old(#t~string388!base)=27670116110564327431, old(#t~string388!offset)=27670116110564327443, old(#t~string391!base)=27670116110564327453, old(#t~string391!offset)=27670116110564327473, old(~#features~0!base)=27670116110564327456, old(~#features~0!offset)=27670116110564327478, old(~#id_table~0!base)=27670116110564327428, old(~#id_table~0!offset)=27670116110564327477, old(~#virtblk_fops~0!base)=27670116110564327434, old(~#virtblk_fops~0!offset)=27670116110564327474, old(~#virtio_blk~0!base)=27670116110564327444, old(~#virtio_blk~0!offset)=27670116110564327458, old(~__mod_virtio_device_table~0!device)=27670116110564327430, old(~__mod_virtio_device_table~0!vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] CALL call #t~ret405 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] CALL call #t~ret392 := init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0, #t~string388); [L4310] assume -2147483648 <= #t~ret389 && #t~ret389 <= 2147483647; [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4311] COND FALSE !(~major~0 < 0) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~20=0] [L4351] RET call #t~ret392 := init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret392=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4352] COND FALSE !(0 != ~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4375] COND TRUE 0 != ~tmp___1~8 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4359] assume -2147483648 <= #t~nondet393 && #t~nondet393 <= 2147483647; [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0 == ~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4025] COND TRUE 1447184708 == ~cmd % 4294967296 [L4026] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: 1067 + #t~mem250!offset }, 8); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20, 208); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~mem250; [L3987] havoc #t~mem251; [L3987] havoc #t~ret252; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0, ~tmp~24=0] [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret253=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3988] assume -9223372036854775808 <= #t~ret253 && #t~ret253 <= 9223372036854775807; [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3989] COND FALSE !(0 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: 1067 + #t~mem255!offset }, 8); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem255!base=27670116110564327433, #t~mem255!offset=0, #t~mem256!base=27670116110564327464, #t~mem256!offset=27670116110564327468, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3995] CALL call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208); VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4502] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4507] COND TRUE (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296 [L4508] ~ldv_blk_rq~0 := 1; VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L4425] #res := ~ldv_func_res~0; VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L3995] RET call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem255!base=27670116110564327433, #t~mem255!offset=0, #t~mem256!base=27670116110564327464, #t~mem256!offset=27670116110564327468, #t~ret257!base=0, #t~ret257!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem256; [L3995] havoc #t~mem255; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0, ~tmp~24=0] [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret258=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3996] assume -9223372036854775808 <= #t~ret258 && #t~ret258 <= 9223372036854775807; [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3997] COND FALSE !(0 != ~tmp___2~1) [L4004] FCALL call write~int(7, { base: ~req~1!base, offset: 64 + ~req~1!offset }, 4); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: 1067 + #t~mem260!offset }, 8); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0); [L4005] assume -2147483648 <= #t~ret263 && #t~ret263 <= 2147483647; [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~mem261; [L4005] havoc #t~mem262; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4006] #res := ~tmp___3~1; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #res=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~tmp___3~1=13, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~ret266=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4027] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4028] COND FALSE !(0 == ~err~1) VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #res=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret395=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4363] assume -2147483648 <= #t~ret395 && #t~ret395 <= 2147483647; [L4363] havoc #t~ret395; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4375] COND FALSE !(0 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4382] CALL call fini(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4382] RET call fini(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4384] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4542] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4545] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=27670116110564327452, #NULL!offset=27670116110564327472, #t~string108!base=27670116110564327435, #t~string108!offset=27670116110564327469, #t~string289!base=27670116110564327480, #t~string289!offset=27670116110564327482, #t~string292!base=27670116110564327429, #t~string292!offset=27670116110564327465, #t~string306!base=27670116110564327483, #t~string306!offset=27670116110564327427, #t~string309!base=27670116110564327462, #t~string309!offset=27670116110564327446, #t~string312!base=27670116110564327454, #t~string312!offset=27670116110564327438, #t~string387!base=27670116110564327442, #t~string387!offset=27670116110564327459, #t~string388!base=27670116110564327431, #t~string388!offset=27670116110564327443, #t~string391!base=27670116110564327453, #t~string391!offset=27670116110564327473, old(#NULL!base)=27670116110564327452, old(#NULL!offset)=27670116110564327472, old(#t~string108!base)=27670116110564327435, old(#t~string108!offset)=27670116110564327469, old(#t~string289!base)=27670116110564327480, old(#t~string289!offset)=27670116110564327482, old(#t~string292!base)=27670116110564327429, old(#t~string292!offset)=27670116110564327465, old(#t~string306!base)=27670116110564327483, old(#t~string306!offset)=27670116110564327427, old(#t~string309!base)=27670116110564327462, old(#t~string309!offset)=27670116110564327446, old(#t~string312!base)=27670116110564327454, old(#t~string312!offset)=27670116110564327438, old(#t~string387!base)=27670116110564327442, old(#t~string387!offset)=27670116110564327459, old(#t~string388!base)=27670116110564327431, old(#t~string388!offset)=27670116110564327443, old(#t~string391!base)=27670116110564327453, old(#t~string391!offset)=27670116110564327473, old(~#features~0!base)=27670116110564327456, old(~#features~0!offset)=27670116110564327478, old(~#id_table~0!base)=27670116110564327428, old(~#id_table~0!offset)=27670116110564327477, old(~#virtblk_fops~0!base)=27670116110564327434, old(~#virtblk_fops~0!offset)=27670116110564327474, old(~#virtio_blk~0!base)=27670116110564327444, old(~#virtio_blk~0!offset)=27670116110564327458, old(~__mod_virtio_device_table~0!device)=27670116110564327430, old(~__mod_virtio_device_table~0!vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#features~0!base=27670116110564327456, ~#features~0!offset=27670116110564327478, ~#id_table~0!base=27670116110564327428, ~#id_table~0!offset=27670116110564327477, ~#virtblk_fops~0!base=27670116110564327434, ~#virtblk_fops~0!offset=27670116110564327474, ~#virtio_blk~0!base=27670116110564327444, ~#virtio_blk~0!offset=27670116110564327458, ~__mod_virtio_device_table~0!device=27670116110564327430, ~__mod_virtio_device_table~0!vendor=27670116110564327432, ~index~0=27670116110564327449, ~ldv_blk_rq~0=27670116110564327471, ~LDV_IN_INTERRUPT~0=27670116110564327447, ~major~0=27670116110564327466] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5); [L4180] FCALL call write~init~int(118, { base: #t~string306!base, offset: #t~string306!offset }, 1); [L4180] FCALL call write~init~int(100, { base: #t~string306!base, offset: 1 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(37, { base: #t~string306!base, offset: 2 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(99, { base: #t~string306!base, offset: 3 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(0, { base: #t~string306!base, offset: 4 + #t~string306!offset }, 1); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7); [L4183] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4183] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 5 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(0, { base: #t~string309!base, offset: 6 + #t~string309!offset }, 1); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4299-L4302] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4297-L4298] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4330] ~__mod_virtio_device_table~0!device := 0; [L4330] ~__mod_virtio_device_table~0!vendor := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(#NULL!base)=27670116110564327452, old(#NULL!offset)=27670116110564327472, old(#t~string108!base)=27670116110564327435, old(#t~string108!offset)=27670116110564327469, old(#t~string289!base)=27670116110564327480, old(#t~string289!offset)=27670116110564327482, old(#t~string292!base)=27670116110564327429, old(#t~string292!offset)=27670116110564327465, old(#t~string306!base)=27670116110564327483, old(#t~string306!offset)=27670116110564327427, old(#t~string309!base)=27670116110564327462, old(#t~string309!offset)=27670116110564327446, old(#t~string312!base)=27670116110564327454, old(#t~string312!offset)=27670116110564327438, old(#t~string387!base)=27670116110564327442, old(#t~string387!offset)=27670116110564327459, old(#t~string388!base)=27670116110564327431, old(#t~string388!offset)=27670116110564327443, old(#t~string391!base)=27670116110564327453, old(#t~string391!offset)=27670116110564327473, old(~#features~0!base)=27670116110564327456, old(~#features~0!offset)=27670116110564327478, old(~#id_table~0!base)=27670116110564327428, old(~#id_table~0!offset)=27670116110564327477, old(~#virtblk_fops~0!base)=27670116110564327434, old(~#virtblk_fops~0!offset)=27670116110564327474, old(~#virtio_blk~0!base)=27670116110564327444, old(~#virtio_blk~0!offset)=27670116110564327458, old(~__mod_virtio_device_table~0!device)=27670116110564327430, old(~__mod_virtio_device_table~0!vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] CALL call #t~ret405 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] CALL call #t~ret392 := init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0, #t~string388); [L4310] assume -2147483648 <= #t~ret389 && #t~ret389 <= 2147483647; [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4311] COND FALSE !(~major~0 < 0) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~20=0] [L4351] RET call #t~ret392 := init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret392=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4352] COND FALSE !(0 != ~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4375] COND TRUE 0 != ~tmp___1~8 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4359] assume -2147483648 <= #t~nondet393 && #t~nondet393 <= 2147483647; [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0 == ~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4025] COND TRUE 1447184708 == ~cmd % 4294967296 [L4026] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: 1067 + #t~mem250!offset }, 8); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20, 208); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~mem250; [L3987] havoc #t~mem251; [L3987] havoc #t~ret252; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0, ~tmp~24=0] [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret253=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3988] assume -9223372036854775808 <= #t~ret253 && #t~ret253 <= 9223372036854775807; [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3989] COND FALSE !(0 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: 1067 + #t~mem255!offset }, 8); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem255!base=27670116110564327433, #t~mem255!offset=0, #t~mem256!base=27670116110564327464, #t~mem256!offset=27670116110564327468, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3995] CALL call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208); VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4502] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4507] COND TRUE (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296 [L4508] ~ldv_blk_rq~0 := 1; VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L4425] #res := ~ldv_func_res~0; VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L3995] RET call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem255!base=27670116110564327433, #t~mem255!offset=0, #t~mem256!base=27670116110564327464, #t~mem256!offset=27670116110564327468, #t~ret257!base=0, #t~ret257!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem256; [L3995] havoc #t~mem255; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0, ~tmp~24=0] [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret258=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3996] assume -9223372036854775808 <= #t~ret258 && #t~ret258 <= 9223372036854775807; [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3997] COND FALSE !(0 != ~tmp___2~1) [L4004] FCALL call write~int(7, { base: ~req~1!base, offset: 64 + ~req~1!offset }, 4); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: 1067 + #t~mem260!offset }, 8); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0); [L4005] assume -2147483648 <= #t~ret263 && #t~ret263 <= 2147483647; [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~mem261; [L4005] havoc #t~mem262; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4006] #res := ~tmp___3~1; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #res=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~tmp___3~1=13, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~ret266=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4027] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4028] COND FALSE !(0 == ~err~1) VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #res=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret395=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4363] assume -2147483648 <= #t~ret395 && #t~ret395 <= 2147483647; [L4363] havoc #t~ret395; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4375] COND FALSE !(0 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4382] CALL call fini(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4382] RET call fini(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4384] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4542] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4545] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] ----- [2018-11-23 00:24:01,745 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 27670116110564327458 could not be translated for associated CType STRUCT~~virtio_driver?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?id_table~*virtio_device_id?feature_table~*UINT?feature_table_size~UINT?probe~*((*virtio_device ) : INT)?remove~*((*virtio_device ) : VOID)?config_changed~*((*virtio_device ) : VOID)# [2018-11-23 00:24:01,746 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 27670116110564327456 could not be translated for associated CType ARRAY#_9_~UINT# [2018-11-23 00:24:01,746 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 27670116110564327477 could not be translated for associated CType ARRAY#_2_~STRUCT~~virtio_device_id?device~~__u32~0?vendor~~__u32~0## [2018-11-23 00:24:01,747 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 27670116110564327434 could not be translated for associated CType STRUCT~~block_device_operations?open~*((*block_device ~fmode_t~0 ) : INT)?release~*((*gendisk ~fmode_t~0 ) : INT)?locked_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?compat_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?direct_access~*((*block_device ~sector_t~0 **VOID *ULONG ) : INT)?media_changed~*((*gendisk ) : INT)?unlock_native_capacity~*((*gendisk ) : VOID)?revalidate_disk~*((*gendisk ) : INT)?getgeo~*((*block_device *hd_geometry ) : INT)?swap_slot_free_notify~*((*block_device ULONG ) : VOID)?owner~*module# [2018-11-23 00:24:01,747 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,747 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 27670116110564327478 could not be translated for associated CType ARRAY#_9_~UINT# [2018-11-23 00:24:01,748 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,749 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 27670116110564327428 could not be translated for associated CType ARRAY#_2_~STRUCT~~virtio_device_id?device~~__u32~0?vendor~~__u32~0## [2018-11-23 00:24:01,749 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,749 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 27670116110564327474 could not be translated for associated CType STRUCT~~block_device_operations?open~*((*block_device ~fmode_t~0 ) : INT)?release~*((*gendisk ~fmode_t~0 ) : INT)?locked_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?compat_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?direct_access~*((*block_device ~sector_t~0 **VOID *ULONG ) : INT)?media_changed~*((*gendisk ) : INT)?unlock_native_capacity~*((*gendisk ) : VOID)?revalidate_disk~*((*gendisk ) : INT)?getgeo~*((*block_device *hd_geometry ) : INT)?swap_slot_free_notify~*((*block_device ULONG ) : VOID)?owner~*module# [2018-11-23 00:24:01,749 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 27670116110564327444 could not be translated for associated CType STRUCT~~virtio_driver?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?id_table~*virtio_device_id?feature_table~*UINT?feature_table_size~UINT?probe~*((*virtio_device ) : INT)?remove~*((*virtio_device ) : VOID)?config_changed~*((*virtio_device ) : VOID)# [2018-11-23 00:24:01,750 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,750 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,751 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,751 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,751 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,752 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,752 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,752 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,753 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,753 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,753 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,754 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,754 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,755 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,755 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,756 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,756 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,762 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,762 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,763 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,763 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,763 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,764 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,764 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,764 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,765 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,765 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,765 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,766 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,766 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,766 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,769 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,770 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,770 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,770 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,771 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,771 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,771 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,771 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,772 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,772 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,772 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,773 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,773 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,773 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,774 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,774 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,774 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,774 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,775 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,775 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,775 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,776 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,776 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,776 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,777 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,777 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,777 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,777 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,777 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,778 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,778 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,778 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,779 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,779 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,779 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,780 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,780 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,780 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,781 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,781 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,781 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,781 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,782 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch394 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-23 00:24:01,782 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,782 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,783 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,783 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,783 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,785 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch394 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-23 00:24:01,785 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,785 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,791 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,791 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,792 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,792 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:01,792 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,792 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:01,792 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=27670116110564327452, #NULL!offset=27670116110564327472, #t~string108!base=27670116110564327435, #t~string108!offset=27670116110564327469, #t~string289!base=27670116110564327480, #t~string289!offset=27670116110564327482, #t~string292!base=27670116110564327429, #t~string292!offset=27670116110564327465, #t~string306!base=27670116110564327483, #t~string306!offset=27670116110564327427, #t~string309!base=27670116110564327462, #t~string309!offset=27670116110564327446, #t~string312!base=27670116110564327454, #t~string312!offset=27670116110564327438, #t~string387!base=27670116110564327442, #t~string387!offset=27670116110564327459, #t~string388!base=27670116110564327431, #t~string388!offset=27670116110564327443, #t~string391!base=27670116110564327453, #t~string391!offset=27670116110564327473, old(#NULL!base)=27670116110564327452, old(#NULL!offset)=27670116110564327472, old(#t~string108!base)=27670116110564327435, old(#t~string108!offset)=27670116110564327469, old(#t~string289!base)=27670116110564327480, old(#t~string289!offset)=27670116110564327482, old(#t~string292!base)=27670116110564327429, old(#t~string292!offset)=27670116110564327465, old(#t~string306!base)=27670116110564327483, old(#t~string306!offset)=27670116110564327427, old(#t~string309!base)=27670116110564327462, old(#t~string309!offset)=27670116110564327446, old(#t~string312!base)=27670116110564327454, old(#t~string312!offset)=27670116110564327438, old(#t~string387!base)=27670116110564327442, old(#t~string387!offset)=27670116110564327459, old(#t~string388!base)=27670116110564327431, old(#t~string388!offset)=27670116110564327443, old(#t~string391!base)=27670116110564327453, old(#t~string391!offset)=27670116110564327473, old(~#features~0!base)=27670116110564327456, old(~#features~0!offset)=27670116110564327478, old(~#id_table~0!base)=27670116110564327428, old(~#id_table~0!offset)=27670116110564327477, old(~#virtblk_fops~0!base)=27670116110564327434, old(~#virtblk_fops~0!offset)=27670116110564327474, old(~#virtio_blk~0!base)=27670116110564327444, old(~#virtio_blk~0!offset)=27670116110564327458, old(~__mod_virtio_device_table~0!device)=27670116110564327430, old(~__mod_virtio_device_table~0!vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#features~0!base=27670116110564327456, ~#features~0!offset=27670116110564327478, ~#id_table~0!base=27670116110564327428, ~#id_table~0!offset=27670116110564327477, ~#virtblk_fops~0!base=27670116110564327434, ~#virtblk_fops~0!offset=27670116110564327474, ~#virtio_blk~0!base=27670116110564327444, ~#virtio_blk~0!offset=27670116110564327458, ~__mod_virtio_device_table~0!device=27670116110564327430, ~__mod_virtio_device_table~0!vendor=27670116110564327432, ~index~0=27670116110564327449, ~ldv_blk_rq~0=27670116110564327471, ~LDV_IN_INTERRUPT~0=27670116110564327447, ~major~0=27670116110564327466] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5); [L4180] FCALL call write~init~int(118, { base: #t~string306!base, offset: #t~string306!offset }, 1); [L4180] FCALL call write~init~int(100, { base: #t~string306!base, offset: 1 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(37, { base: #t~string306!base, offset: 2 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(99, { base: #t~string306!base, offset: 3 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(0, { base: #t~string306!base, offset: 4 + #t~string306!offset }, 1); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7); [L4183] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4183] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 5 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(0, { base: #t~string309!base, offset: 6 + #t~string309!offset }, 1); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4299-L4302] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4297-L4298] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4330] ~__mod_virtio_device_table~0!device := 0; [L4330] ~__mod_virtio_device_table~0!vendor := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(#NULL!base)=27670116110564327452, old(#NULL!offset)=27670116110564327472, old(#t~string108!base)=27670116110564327435, old(#t~string108!offset)=27670116110564327469, old(#t~string289!base)=27670116110564327480, old(#t~string289!offset)=27670116110564327482, old(#t~string292!base)=27670116110564327429, old(#t~string292!offset)=27670116110564327465, old(#t~string306!base)=27670116110564327483, old(#t~string306!offset)=27670116110564327427, old(#t~string309!base)=27670116110564327462, old(#t~string309!offset)=27670116110564327446, old(#t~string312!base)=27670116110564327454, old(#t~string312!offset)=27670116110564327438, old(#t~string387!base)=27670116110564327442, old(#t~string387!offset)=27670116110564327459, old(#t~string388!base)=27670116110564327431, old(#t~string388!offset)=27670116110564327443, old(#t~string391!base)=27670116110564327453, old(#t~string391!offset)=27670116110564327473, old(~#features~0!base)=27670116110564327456, old(~#features~0!offset)=27670116110564327478, old(~#id_table~0!base)=27670116110564327428, old(~#id_table~0!offset)=27670116110564327477, old(~#virtblk_fops~0!base)=27670116110564327434, old(~#virtblk_fops~0!offset)=27670116110564327474, old(~#virtio_blk~0!base)=27670116110564327444, old(~#virtio_blk~0!offset)=27670116110564327458, old(~__mod_virtio_device_table~0!device)=27670116110564327430, old(~__mod_virtio_device_table~0!vendor)=27670116110564327432, old(~index~0)=27670116110564327449, old(~ldv_blk_rq~0)=27670116110564327471, old(~LDV_IN_INTERRUPT~0)=27670116110564327447, old(~major~0)=27670116110564327466, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [?] CALL call #t~ret405 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=0, ~major~0=0] [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] CALL call #t~ret392 := init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0, #t~string388); [L4310] assume -2147483648 <= #t~ret389 && #t~ret389 <= 2147483647; [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4311] COND FALSE !(~major~0 < 0) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~20=0] [L4351] RET call #t~ret392 := init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret392=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4351] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4352] COND FALSE !(0 != ~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~21=0] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4375] COND TRUE 0 != ~tmp___1~8 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___1~8=1, ~tmp~21=0] [L4359] assume -2147483648 <= #t~nondet393 && #t~nondet393 <= 2147483647; [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0 == ~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4025] COND TRUE 1447184708 == ~cmd % 4294967296 [L4026] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: 1067 + #t~mem250!offset }, 8); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20, 208); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~mem250; [L3987] havoc #t~mem251; [L3987] havoc #t~ret252; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0, ~tmp~24=0] [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret253=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3988] assume -9223372036854775808 <= #t~ret253 && #t~ret253 <= 9223372036854775807; [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3989] COND FALSE !(0 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: 1067 + #t~mem255!offset }, 8); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem255!base=27670116110564327433, #t~mem255!offset=0, #t~mem256!base=27670116110564327464, #t~mem256!offset=27670116110564327468, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3995] CALL call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208); VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4502] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4507] COND TRUE (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296 [L4508] ~ldv_blk_rq~0 := 1; VAL [#in~mask=208, #in~res!base=0, #in~res!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mask=208, ~res!base=0, ~res!offset=0] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L4425] #res := ~ldv_func_res~0; VAL [#in~ldv_func_arg1!base=27670116110564327464, #in~ldv_func_arg1!offset=27670116110564327468, #in~ldv_func_arg2!base=0, #in~ldv_func_arg2!offset=0, #in~ldv_func_arg3=208, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~ldv_func_arg1!base=27670116110564327464, ~ldv_func_arg1!offset=27670116110564327468, ~ldv_func_arg2!base=0, ~ldv_func_arg2!offset=0, ~ldv_func_arg3=208, ~ldv_func_res~0!base=0, ~ldv_func_res~0!offset=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp~25!base=0, ~tmp~25!offset=0] [L3995] RET call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem255!base=27670116110564327433, #t~mem255!offset=0, #t~mem256!base=27670116110564327464, #t~mem256!offset=27670116110564327468, #t~ret257!base=0, #t~ret257!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem256; [L3995] havoc #t~mem255; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0, ~tmp~24=0] [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret258=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3996] assume -9223372036854775808 <= #t~ret258 && #t~ret258 <= 9223372036854775807; [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L3997] COND FALSE !(0 != ~tmp___2~1) [L4004] FCALL call write~int(7, { base: ~req~1!base, offset: 64 + ~req~1!offset }, 4); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: 1067 + #t~mem260!offset }, 8); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0); [L4005] assume -2147483648 <= #t~ret263 && #t~ret263 <= 2147483647; [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~mem261; [L4005] havoc #t~mem262; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4006] #res := ~tmp___3~1; VAL [#in~disk!base=27670116110564327426, #in~disk!offset=0, #in~id_str!base=27670116110564327457, #in~id_str!offset=0, #NULL!base=0, #NULL!offset=0, #res=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bio~0!base=0, ~bio~0!offset=0, ~disk!base=27670116110564327426, ~disk!offset=0, ~id_str!base=27670116110564327457, ~id_str!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~req~1!base=0, ~req~1!offset=0, ~tmp___0~9=0, ~tmp___2~1=0, ~tmp___3~1=13, ~vblk~2!base=27670116110564327450, ~vblk~2!offset=0] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~ret266=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4027] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4028] COND FALSE !(0 == ~err~1) VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_str~0!base=27670116110564327457, ~#id_str~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#in~bdev!base=27670116110564327460, #in~bdev!offset=0, #in~cmd=1447184708, #in~data=27670116110564327424, #in~mode=27670116110564327476, #NULL!base=0, #NULL!offset=0, #res=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~bdev!base=27670116110564327460, ~bdev!offset=0, ~cmd=1447184708, ~data=27670116110564327424, ~disk~0!base=27670116110564327426, ~disk~0!offset=0, ~err~1=13, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~mode=27670116110564327476, ~usr_data~0!base=0, ~usr_data~0!offset=-9223372036854775808, ~vblk~3!base=27670116110564327450, ~vblk~3!offset=0] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret395=13, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4363] assume -2147483648 <= #t~ret395 && #t~ret395 <= 2147483647; [L4363] havoc #t~ret395; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=1, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4375] COND FALSE !(0 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4382] CALL call fini(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4382] RET call fini(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, #t~switch394=true, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~tmp___0~13=0, ~tmp___1~8=0, ~tmp~21=0, ~var_group1~0!base=27670116110564327460, ~var_group1~0!offset=0, ~var_virtblk_ioctl_5_p1~0=27670116110564327476, ~var_virtblk_ioctl_5_p2~0=1447184708, ~var_virtblk_ioctl_5_p3~0=27670116110564327424] [L4384] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4542] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4545] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=27670116110564327440, #t~string108!offset=0, #t~string289!base=27670116110564327479, #t~string289!offset=0, #t~string292!base=27670116110564327425, #t~string292!offset=0, #t~string306!base=27670116110564327481, #t~string306!offset=0, #t~string309!base=27670116110564327461, #t~string309!offset=0, #t~string312!base=27670116110564327455, #t~string312!offset=0, #t~string387!base=27670116110564327441, #t~string387!offset=0, #t~string388!base=27670116110564327436, #t~string388!offset=0, #t~string391!base=27670116110564327451, #t~string391!offset=0, old(~ldv_blk_rq~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~major~0)=0, ~#__this_module~0!base=27670116110564327463, ~#__this_module~0!offset=27670116110564327467, ~#features~0!base=27670116110564327470, ~#features~0!offset=0, ~#id_table~0!base=27670116110564327448, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27670116110564327437, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=27670116110564327445, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3726] static int major ; [L3727] static int index ; [L4299-L4302] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4335] int LDV_IN_INTERRUPT ; [L4496] int ldv_blk_rq = 0; [L4080-L4081] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4297-L4298] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4303-L4304] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4330] struct virtio_device_id const __mod_virtio_device_table ; VAL [\old(__mod_virtio_device_table)=27670116110564327432, \old(__mod_virtio_device_table)=27670116110564327430, \old(features)=null, \old(features)=null, \old(id_table)=null, \old(id_table)=null, \old(index)=27670116110564327449, \old(ldv_blk_rq)=27670116110564327471, \old(LDV_IN_INTERRUPT)=27670116110564327447, \old(major)=27670116110564327466, \old(virtblk_fops)=null, \old(virtblk_fops)=null, \old(virtio_blk)=null, \old(virtio_blk)=null, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=0, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4338] struct block_device *var_group1 ; [L4339] fmode_t var_virtblk_ioctl_5_p1 ; [L4340] unsigned int var_virtblk_ioctl_5_p2 ; [L4341] unsigned long var_virtblk_ioctl_5_p3 ; [L4342] struct hd_geometry *var_group2 ; [L4343] int tmp ; [L4344] int tmp___0 ; [L4345] int tmp___1 ; [L4348] LDV_IN_INTERRUPT = 1 [L4351] CALL, EXPR init() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4307] int tmp ; [L4310] major = register_blkdev(0U, "virtblk") [L4311] COND FALSE !(major < 0) [L4316] tmp = register_virtio_driver(& virtio_blk) [L4317] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4351] RET, EXPR init() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, init()=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4351] tmp = init() [L4352] COND FALSE !(tmp != 0) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND TRUE tmp___1 != 0 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___1=1, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4359] tmp___0 = __VERIFIER_nondet_int() [L4361] case 0: [L4363] CALL virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3) VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4012] struct gendisk *disk ; [L4013] struct virtio_blk *vblk ; [L4014] void *usr_data ; [L4015] char id_str[20U] ; [L4016] int err ; [L4017] int tmp ; [L4018] bool tmp___0 ; [L4019] int tmp___1 ; [L4020] int tmp___2 ; [L4023] EXPR bdev->bd_disk [L4023] disk = bdev->bd_disk [L4024] EXPR disk->private_data [L4024] vblk = (struct virtio_blk *)disk->private_data [L4025] COND TRUE cmd == 1447184708U [L4026] usr_data = (void *)data VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, bdev={27670116110564327460:0}, cmd=1447184708, data=9223372036854775808, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mode=52, usr_data={0:-9223372036854775808}, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4027] CALL, EXPR virtblk_get_id(disk, (char *)(& id_str)) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3976] struct virtio_blk *vblk ; [L3977] struct request *req ; [L3978] struct bio *bio ; [L3979] long tmp ; [L3980] long tmp___0 ; [L3981] long tmp___1 ; [L3982] long tmp___2 ; [L3983] int tmp___3 ; [L3986] EXPR disk->private_data [L3986] vblk = (struct virtio_blk *)disk->private_data [L3987] EXPR vblk->disk [L3987] EXPR (vblk->disk)->queue [L3987] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L3988] CALL, EXPR IS_ERR((void const *)bio) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4408] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4449] return ((unsigned long )ptr > 2012UL); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, tmp=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3988] RET, EXPR IS_ERR((void const *)bio) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, IS_ERR((void const *)bio)=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3988] tmp___0 = IS_ERR((void const *)bio) [L3989] COND FALSE !(tmp___0 != 0L) [L3995] EXPR vblk->disk [L3995] EXPR (vblk->disk)->queue VAL [(vblk->disk)->queue={27670116110564327464:27670116110564327468}, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp___0=0, vblk={27670116110564327450:0}, vblk->disk={27670116110564327433:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3995] CALL, EXPR ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg2={0:0}, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4418] ldv_func_ret_type___3 ldv_func_res ; [L4419] struct request *tmp ; [L4422] tmp = blk_make_request(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L4423] ldv_func_res = tmp VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, major=0, tmp={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4424] CALL ldv_get_blk_rq(ldv_func_res, ldv_func_arg3) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, res={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4499] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mask=208, res={0:0}, res={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4502] COND TRUE ldv_blk_rq == 0 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mask=208, res={0:0}, res={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4507] COND TRUE (mask == 16U || mask == 208U) || mask == 16U [L4508] ldv_blk_rq = 1 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mask=208, res={0:0}, res={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4424] RET ldv_get_blk_rq(ldv_func_res, ldv_func_arg3) VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, major=0, tmp={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4425] return (ldv_func_res); VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result={0:0}, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, major=0, tmp={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3995] RET, EXPR ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) VAL [(vblk->disk)->queue={27670116110564327464:27670116110564327468}, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U)={0:0}, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp___0=0, vblk={27670116110564327450:0}, vblk->disk={27670116110564327433:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3995] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L3996] CALL, EXPR IS_ERR((void const *)req) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4408] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4449] return ((unsigned long )ptr > 2012UL); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, tmp=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3996] RET, EXPR IS_ERR((void const *)req) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, IS_ERR((void const *)req)=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, req={0:0}, tmp___0=0, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3996] tmp___2 = IS_ERR((void const *)req) [L3997] COND FALSE !(tmp___2 != 0L) [L4004] req->cmd_type = 7 [L4005] EXPR vblk->disk [L4005] EXPR (vblk->disk)->queue [L4005] EXPR vblk->disk [L4005] tmp___3 = blk_execute_rq((vblk->disk)->queue, vblk->disk, req, 0) [L4006] return (tmp___3); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=13, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, req={0:0}, tmp___0=0, tmp___2=0, tmp___3=13, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4027] RET, EXPR virtblk_get_id(disk, (char *)(& id_str)) VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, bdev={27670116110564327460:0}, cmd=1447184708, data=9223372036854775808, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=52, usr_data={0:-9223372036854775808}, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtblk_get_id(disk, (char *)(& id_str))=13, virtio_blk={27670116110564327445:0}] [L4027] err = virtblk_get_id(disk, (char *)(& id_str)) [L4028] COND FALSE !(err == 0) VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, bdev={27670116110564327460:0}, cmd=1447184708, data=9223372036854775808, disk={27670116110564327426:0}, err=13, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=52, usr_data={0:-9223372036854775808}, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4038] return (err); [L4038] return (err); VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, \result=13, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, bdev={27670116110564327460:0}, cmd=1447184708, data=9223372036854775808, disk={27670116110564327426:0}, err=13, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=52, usr_data={0:-9223372036854775808}, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4363] RET virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___0=0, tmp___1=1, var_group1={27670116110564327460:0}, var_virtblk_ioctl_5_p1=52, var_virtblk_ioctl_5_p2=1447184708, var_virtblk_ioctl_5_p3=9223372036854775808, virtblk_fops={27670116110564327437:0}, virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3)=13, virtio_blk={27670116110564327445:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND FALSE !(tmp___1 != 0) [L4382] CALL fini() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4382] RET fini() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___0=0, tmp___1=0, var_group1={27670116110564327460:0}, var_virtblk_ioctl_5_p1=52, var_virtblk_ioctl_5_p2=1447184708, var_virtblk_ioctl_5_p3=9223372036854775808, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4384] CALL ldv_check_final_state() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4542] COND FALSE !(ldv_blk_rq == 0) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4545] CALL ldv_error() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4433] __VERIFIER_error() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] ----- [2018-11-23 00:24:02,245 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:24:02 BoogieIcfgContainer [2018-11-23 00:24:02,245 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 00:24:02,245 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 00:24:02,245 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 00:24:02,246 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 00:24:02,249 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:23:59" (3/4) ... [2018-11-23 00:24:02,252 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 00:24:02,252 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 00:24:02,253 INFO L168 Benchmark]: Toolchain (without parser) took 3962.28 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 152.6 MB). Free memory was 957.0 MB in the beginning and 1.0 GB in the end (delta: -77.2 MB). Peak memory consumption was 75.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:02,254 INFO L168 Benchmark]: CDTParser took 0.10 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:24:02,254 INFO L168 Benchmark]: CACSL2BoogieTranslator took 875.60 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 152.6 MB). Free memory was 957.0 MB in the beginning and 1.1 GB in the end (delta: -106.4 MB). Peak memory consumption was 72.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:02,254 INFO L168 Benchmark]: Boogie Procedure Inliner took 41.99 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:02,255 INFO L168 Benchmark]: Boogie Preprocessor took 41.64 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:02,255 INFO L168 Benchmark]: RCFGBuilder took 633.81 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 987.3 MB in the end (delta: 65.3 MB). Peak memory consumption was 65.3 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:02,256 INFO L168 Benchmark]: TraceAbstraction took 2359.39 ms. Allocated memory is still 1.2 GB. Free memory was 987.3 MB in the beginning and 1.0 GB in the end (delta: -46.9 MB). Peak memory consumption was 124.0 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:02,256 INFO L168 Benchmark]: Witness Printer took 6.84 ms. Allocated memory is still 1.2 GB. Free memory is still 1.0 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:24:02,260 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 875.60 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 152.6 MB). Free memory was 957.0 MB in the beginning and 1.1 GB in the end (delta: -106.4 MB). Peak memory consumption was 72.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 41.99 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 41.64 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 633.81 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 987.3 MB in the end (delta: 65.3 MB). Peak memory consumption was 65.3 MB. Max. memory is 11.5 GB. * TraceAbstraction took 2359.39 ms. Allocated memory is still 1.2 GB. Free memory was 987.3 MB in the beginning and 1.0 GB in the end (delta: -46.9 MB). Peak memory consumption was 124.0 MB. Max. memory is 11.5 GB. * Witness Printer took 6.84 ms. Allocated memory is still 1.2 GB. Free memory is still 1.0 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 27670116110564327458 could not be translated for associated CType STRUCT~~virtio_driver?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?id_table~*virtio_device_id?feature_table~*UINT?feature_table_size~UINT?probe~*((*virtio_device ) : INT)?remove~*((*virtio_device ) : VOID)?config_changed~*((*virtio_device ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 27670116110564327456 could not be translated for associated CType ARRAY#_9_~UINT# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 27670116110564327477 could not be translated for associated CType ARRAY#_2_~STRUCT~~virtio_device_id?device~~__u32~0?vendor~~__u32~0## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 27670116110564327434 could not be translated for associated CType STRUCT~~block_device_operations?open~*((*block_device ~fmode_t~0 ) : INT)?release~*((*gendisk ~fmode_t~0 ) : INT)?locked_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?compat_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?direct_access~*((*block_device ~sector_t~0 **VOID *ULONG ) : INT)?media_changed~*((*gendisk ) : INT)?unlock_native_capacity~*((*gendisk ) : VOID)?revalidate_disk~*((*gendisk ) : INT)?getgeo~*((*block_device *hd_geometry ) : INT)?swap_slot_free_notify~*((*block_device ULONG ) : VOID)?owner~*module# - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 27670116110564327478 could not be translated for associated CType ARRAY#_9_~UINT# - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 27670116110564327428 could not be translated for associated CType ARRAY#_2_~STRUCT~~virtio_device_id?device~~__u32~0?vendor~~__u32~0## - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 27670116110564327474 could not be translated for associated CType STRUCT~~block_device_operations?open~*((*block_device ~fmode_t~0 ) : INT)?release~*((*gendisk ~fmode_t~0 ) : INT)?locked_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?compat_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?direct_access~*((*block_device ~sector_t~0 **VOID *ULONG ) : INT)?media_changed~*((*gendisk ) : INT)?unlock_native_capacity~*((*gendisk ) : VOID)?revalidate_disk~*((*gendisk ) : INT)?getgeo~*((*block_device *hd_geometry ) : INT)?swap_slot_free_notify~*((*block_device ULONG ) : VOID)?owner~*module# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 27670116110564327444 could not be translated for associated CType STRUCT~~virtio_driver?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?id_table~*virtio_device_id?feature_table~*UINT?feature_table_size~UINT?probe~*((*virtio_device ) : INT)?remove~*((*virtio_device ) : VOID)?config_changed~*((*virtio_device ) : VOID)# - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch394 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch394 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 4433]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 4310. Possible FailurePath: [L3726] static int major ; [L3727] static int index ; [L4299-L4302] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4335] int LDV_IN_INTERRUPT ; [L4496] int ldv_blk_rq = 0; [L4080-L4081] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4297-L4298] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4303-L4304] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4330] struct virtio_device_id const __mod_virtio_device_table ; VAL [\old(__mod_virtio_device_table)=27670116110564327432, \old(__mod_virtio_device_table)=27670116110564327430, \old(features)=null, \old(features)=null, \old(id_table)=null, \old(id_table)=null, \old(index)=27670116110564327449, \old(ldv_blk_rq)=27670116110564327471, \old(LDV_IN_INTERRUPT)=27670116110564327447, \old(major)=27670116110564327466, \old(virtblk_fops)=null, \old(virtblk_fops)=null, \old(virtio_blk)=null, \old(virtio_blk)=null, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=0, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4338] struct block_device *var_group1 ; [L4339] fmode_t var_virtblk_ioctl_5_p1 ; [L4340] unsigned int var_virtblk_ioctl_5_p2 ; [L4341] unsigned long var_virtblk_ioctl_5_p3 ; [L4342] struct hd_geometry *var_group2 ; [L4343] int tmp ; [L4344] int tmp___0 ; [L4345] int tmp___1 ; [L4348] LDV_IN_INTERRUPT = 1 [L4351] CALL, EXPR init() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4307] int tmp ; [L4310] major = register_blkdev(0U, "virtblk") [L4311] COND FALSE !(major < 0) [L4316] tmp = register_virtio_driver(& virtio_blk) [L4317] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4351] RET, EXPR init() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, init()=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4351] tmp = init() [L4352] COND FALSE !(tmp != 0) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND TRUE tmp___1 != 0 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___1=1, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4359] tmp___0 = __VERIFIER_nondet_int() [L4361] case 0: [L4363] CALL virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3) VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4012] struct gendisk *disk ; [L4013] struct virtio_blk *vblk ; [L4014] void *usr_data ; [L4015] char id_str[20U] ; [L4016] int err ; [L4017] int tmp ; [L4018] bool tmp___0 ; [L4019] int tmp___1 ; [L4020] int tmp___2 ; [L4023] EXPR bdev->bd_disk [L4023] disk = bdev->bd_disk [L4024] EXPR disk->private_data [L4024] vblk = (struct virtio_blk *)disk->private_data [L4025] COND TRUE cmd == 1447184708U [L4026] usr_data = (void *)data VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, bdev={27670116110564327460:0}, cmd=1447184708, data=9223372036854775808, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mode=52, usr_data={0:-9223372036854775808}, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4027] CALL, EXPR virtblk_get_id(disk, (char *)(& id_str)) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3976] struct virtio_blk *vblk ; [L3977] struct request *req ; [L3978] struct bio *bio ; [L3979] long tmp ; [L3980] long tmp___0 ; [L3981] long tmp___1 ; [L3982] long tmp___2 ; [L3983] int tmp___3 ; [L3986] EXPR disk->private_data [L3986] vblk = (struct virtio_blk *)disk->private_data [L3987] EXPR vblk->disk [L3987] EXPR (vblk->disk)->queue [L3987] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L3988] CALL, EXPR IS_ERR((void const *)bio) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4408] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4449] return ((unsigned long )ptr > 2012UL); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, tmp=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3988] RET, EXPR IS_ERR((void const *)bio) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, IS_ERR((void const *)bio)=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3988] tmp___0 = IS_ERR((void const *)bio) [L3989] COND FALSE !(tmp___0 != 0L) [L3995] EXPR vblk->disk [L3995] EXPR (vblk->disk)->queue VAL [(vblk->disk)->queue={27670116110564327464:27670116110564327468}, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp___0=0, vblk={27670116110564327450:0}, vblk->disk={27670116110564327433:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3995] CALL, EXPR ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg2={0:0}, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4418] ldv_func_ret_type___3 ldv_func_res ; [L4419] struct request *tmp ; [L4422] tmp = blk_make_request(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L4423] ldv_func_res = tmp VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, major=0, tmp={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4424] CALL ldv_get_blk_rq(ldv_func_res, ldv_func_arg3) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, res={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4499] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mask=208, res={0:0}, res={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4502] COND TRUE ldv_blk_rq == 0 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mask=208, res={0:0}, res={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4507] COND TRUE (mask == 16U || mask == 208U) || mask == 16U [L4508] ldv_blk_rq = 1 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mask=208, res={0:0}, res={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4424] RET ldv_get_blk_rq(ldv_func_res, ldv_func_arg3) VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, major=0, tmp={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4425] return (ldv_func_res); VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result={0:0}, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg1={27670116110564327464:27670116110564327468}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, major=0, tmp={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3995] RET, EXPR ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) VAL [(vblk->disk)->queue={27670116110564327464:27670116110564327468}, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U)={0:0}, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp___0=0, vblk={27670116110564327450:0}, vblk->disk={27670116110564327433:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3995] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L3996] CALL, EXPR IS_ERR((void const *)req) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4408] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4449] return ((unsigned long )ptr > 2012UL); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, tmp=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3996] RET, EXPR IS_ERR((void const *)req) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, IS_ERR((void const *)req)=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, req={0:0}, tmp___0=0, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L3996] tmp___2 = IS_ERR((void const *)req) [L3997] COND FALSE !(tmp___2 != 0L) [L4004] req->cmd_type = 7 [L4005] EXPR vblk->disk [L4005] EXPR (vblk->disk)->queue [L4005] EXPR vblk->disk [L4005] tmp___3 = blk_execute_rq((vblk->disk)->queue, vblk->disk, req, 0) [L4006] return (tmp___3); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=13, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bio={0:0}, disk={27670116110564327426:0}, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, req={0:0}, tmp___0=0, tmp___2=0, tmp___3=13, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4027] RET, EXPR virtblk_get_id(disk, (char *)(& id_str)) VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, bdev={27670116110564327460:0}, cmd=1447184708, data=9223372036854775808, disk={27670116110564327426:0}, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=52, usr_data={0:-9223372036854775808}, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtblk_get_id(disk, (char *)(& id_str))=13, virtio_blk={27670116110564327445:0}] [L4027] err = virtblk_get_id(disk, (char *)(& id_str)) [L4028] COND FALSE !(err == 0) VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, bdev={27670116110564327460:0}, cmd=1447184708, data=9223372036854775808, disk={27670116110564327426:0}, err=13, features={27670116110564327470:0}, id_str={27670116110564327457:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=52, usr_data={0:-9223372036854775808}, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4038] return (err); [L4038] return (err); VAL [\old(cmd)=1447184708, \old(data)=9223372036854775808, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=52, \result=13, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, bdev={27670116110564327460:0}, bdev={27670116110564327460:0}, cmd=1447184708, data=9223372036854775808, disk={27670116110564327426:0}, err=13, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=52, usr_data={0:-9223372036854775808}, vblk={27670116110564327450:0}, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4363] RET virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___0=0, tmp___1=1, var_group1={27670116110564327460:0}, var_virtblk_ioctl_5_p1=52, var_virtblk_ioctl_5_p2=1447184708, var_virtblk_ioctl_5_p3=9223372036854775808, virtblk_fops={27670116110564327437:0}, virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3)=13, virtio_blk={27670116110564327445:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND FALSE !(tmp___1 != 0) [L4382] CALL fini() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4382] RET fini() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___0=0, tmp___1=0, var_group1={27670116110564327460:0}, var_virtblk_ioctl_5_p1=52, var_virtblk_ioctl_5_p2=1447184708, var_virtblk_ioctl_5_p3=9223372036854775808, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4384] CALL ldv_check_final_state() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4542] COND FALSE !(ldv_blk_rq == 0) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4545] CALL ldv_error() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] [L4433] __VERIFIER_error() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={27670116110564327463:27670116110564327467}, features={27670116110564327470:0}, id_table={27670116110564327448:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={27670116110564327437:0}, virtio_blk={27670116110564327445:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 24 procedures, 147 locations, 1 error locations. UNSAFE Result, 2.3s OverallTime, 3 OverallIterations, 2 TraceHistogramMax, 0.1s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 361 SDtfs, 156 SDslu, 605 SDs, 0 SdLazy, 13 SolverSat, 3 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.0s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 9 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=240occurred in iteration=1, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 2 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.1s InterpolantComputationTime, 165 NumberOfCodeBlocks, 165 NumberOfCodeBlocksAsserted, 3 NumberOfCheckSat, 89 ConstructedInterpolants, 0 QuantifiedInterpolants, 7041 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 2 InterpolantComputations, 2 PerfectInterpolantSequences, 10/10 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 00:24:04,142 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 00:24:04,143 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 00:24:04,151 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 00:24:04,151 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 00:24:04,152 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 00:24:04,153 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 00:24:04,154 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 00:24:04,155 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 00:24:04,155 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 00:24:04,156 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 00:24:04,156 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 00:24:04,157 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 00:24:04,157 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 00:24:04,158 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 00:24:04,159 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 00:24:04,159 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 00:24:04,160 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 00:24:04,161 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 00:24:04,162 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 00:24:04,163 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 00:24:04,164 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 00:24:04,165 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 00:24:04,166 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 00:24:04,166 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 00:24:04,166 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 00:24:04,167 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 00:24:04,167 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 00:24:04,168 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 00:24:04,169 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 00:24:04,169 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 00:24:04,169 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 00:24:04,169 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 00:24:04,170 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 00:24:04,170 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 00:24:04,171 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 00:24:04,171 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2018-11-23 00:24:04,180 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 00:24:04,180 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 00:24:04,181 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 00:24:04,181 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 00:24:04,182 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 00:24:04,182 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 00:24:04,182 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 00:24:04,182 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 00:24:04,182 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 00:24:04,182 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 00:24:04,183 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 00:24:04,183 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 00:24:04,183 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 00:24:04,183 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 00:24:04,183 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 00:24:04,183 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 00:24:04,183 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 00:24:04,183 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 00:24:04,184 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 00:24:04,184 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 00:24:04,184 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 00:24:04,184 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 00:24:04,184 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 00:24:04,184 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 00:24:04,184 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 00:24:04,184 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-23 00:24:04,185 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 00:24:04,185 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 00:24:04,185 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 00:24:04,185 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 00:24:04,185 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f9b269fee929c2a3187ed7c2821bda9ec7cbeaea [2018-11-23 00:24:04,218 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 00:24:04,226 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 00:24:04,229 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 00:24:04,230 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 00:24:04,230 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 00:24:04,231 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 00:24:04,269 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data/eb505a967/466e815e5e2c40479a6f35d21f572520/FLAG547765a07 [2018-11-23 00:24:04,711 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 00:24:04,712 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 00:24:04,727 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data/eb505a967/466e815e5e2c40479a6f35d21f572520/FLAG547765a07 [2018-11-23 00:24:04,737 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/data/eb505a967/466e815e5e2c40479a6f35d21f572520 [2018-11-23 00:24:04,739 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 00:24:04,740 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 00:24:04,741 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 00:24:04,741 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 00:24:04,743 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 00:24:04,743 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:24:04" (1/1) ... [2018-11-23 00:24:04,745 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3603b398 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:04, skipping insertion in model container [2018-11-23 00:24:04,745 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:24:04" (1/1) ... [2018-11-23 00:24:04,751 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 00:24:04,814 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 00:24:05,523 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:24:05,611 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 00:24:05,774 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 00:24:05,834 INFO L195 MainTranslator]: Completed translation [2018-11-23 00:24:05,834 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05 WrapperNode [2018-11-23 00:24:05,834 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 00:24:05,835 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 00:24:05,835 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 00:24:05,835 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 00:24:05,842 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... [2018-11-23 00:24:05,869 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... [2018-11-23 00:24:05,878 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 00:24:05,879 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 00:24:05,879 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 00:24:05,879 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 00:24:05,886 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... [2018-11-23 00:24:05,887 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... [2018-11-23 00:24:05,891 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... [2018-11-23 00:24:05,892 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... [2018-11-23 00:24:05,911 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... [2018-11-23 00:24:05,915 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... [2018-11-23 00:24:05,919 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... [2018-11-23 00:24:05,924 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 00:24:05,924 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 00:24:05,925 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 00:24:05,925 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 00:24:05,925 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 00:24:05,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2018-11-23 00:24:05,965 INFO L130 BoogieDeclarations]: Found specification of procedure virtblk_getgeo [2018-11-23 00:24:05,965 INFO L138 BoogieDeclarations]: Found implementation of procedure virtblk_getgeo [2018-11-23 00:24:05,965 INFO L130 BoogieDeclarations]: Found specification of procedure scsi_cmd_ioctl [2018-11-23 00:24:05,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2018-11-23 00:24:05,965 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 00:24:05,965 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_config_buf [2018-11-23 00:24:05,965 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_config_buf [2018-11-23 00:24:05,966 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2018-11-23 00:24:05,966 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 00:24:05,966 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR___0 [2018-11-23 00:24:05,966 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR___0 [2018-11-23 00:24:05,966 INFO L130 BoogieDeclarations]: Found specification of procedure init [2018-11-23 00:24:05,966 INFO L138 BoogieDeclarations]: Found implementation of procedure init [2018-11-23 00:24:05,966 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_get_blk_rq [2018-11-23 00:24:05,966 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_get_blk_rq [2018-11-23 00:24:05,966 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_UINT~X~$Pointer$~X~C_UINT~TO~VOID [2018-11-23 00:24:05,966 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_UINT~X~$Pointer$~X~C_UINT~TO~VOID [2018-11-23 00:24:05,967 INFO L130 BoogieDeclarations]: Found specification of procedure variable_test_bit [2018-11-23 00:24:05,967 INFO L138 BoogieDeclarations]: Found implementation of procedure variable_test_bit [2018-11-23 00:24:05,967 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_ptr_err [2018-11-23 00:24:05,967 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_ptr_err [2018-11-23 00:24:05,967 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_blkdev [2018-11-23 00:24:05,967 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2018-11-23 00:24:05,967 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2018-11-23 00:24:05,967 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 00:24:05,967 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 00:24:05,967 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 00:24:05,968 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 00:24:05,968 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_check_driver_offered_feature [2018-11-23 00:24:05,968 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 00:24:05,968 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 00:24:05,968 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_has_feature [2018-11-23 00:24:05,968 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_has_feature [2018-11-23 00:24:05,968 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 00:24:05,968 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 00:24:05,969 INFO L130 BoogieDeclarations]: Found specification of procedure fini [2018-11-23 00:24:05,969 INFO L138 BoogieDeclarations]: Found implementation of procedure fini [2018-11-23 00:24:05,969 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_virtio_driver [2018-11-23 00:24:05,969 INFO L130 BoogieDeclarations]: Found specification of procedure blk_execute_rq [2018-11-23 00:24:05,969 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2018-11-23 00:24:05,969 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 00:24:05,969 INFO L130 BoogieDeclarations]: Found specification of procedure virtblk_ioctl [2018-11-23 00:24:05,969 INFO L138 BoogieDeclarations]: Found implementation of procedure virtblk_ioctl [2018-11-23 00:24:05,969 INFO L130 BoogieDeclarations]: Found specification of procedure register_virtio_driver [2018-11-23 00:24:05,970 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 00:24:05,970 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 00:24:05,970 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 00:24:05,970 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 00:24:05,970 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2018-11-23 00:24:05,970 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-23 00:24:05,970 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 00:24:05,971 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 00:24:05,971 INFO L130 BoogieDeclarations]: Found specification of procedure bio_put [2018-11-23 00:24:05,971 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 00:24:05,971 INFO L130 BoogieDeclarations]: Found specification of procedure bio_map_kern [2018-11-23 00:24:05,971 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2018-11-23 00:24:05,971 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2018-11-23 00:24:05,973 INFO L130 BoogieDeclarations]: Found specification of procedure blk_make_request [2018-11-23 00:24:05,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 00:24:05,974 INFO L130 BoogieDeclarations]: Found specification of procedure register_blkdev [2018-11-23 00:24:05,974 INFO L130 BoogieDeclarations]: Found specification of procedure get_capacity [2018-11-23 00:24:05,974 INFO L138 BoogieDeclarations]: Found implementation of procedure get_capacity [2018-11-23 00:24:05,974 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blk_make_request_5 [2018-11-23 00:24:05,974 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blk_make_request_5 [2018-11-23 00:24:05,974 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2018-11-23 00:24:05,974 INFO L130 BoogieDeclarations]: Found specification of procedure virtblk_get_id [2018-11-23 00:24:05,974 INFO L138 BoogieDeclarations]: Found implementation of procedure virtblk_get_id [2018-11-23 00:24:05,975 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-23 00:24:05,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-23 00:24:05,975 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 00:24:05,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 00:24:05,975 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 00:24:05,975 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 00:24:06,626 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 00:24:06,626 INFO L280 CfgBuilder]: Removed 0 assue(true) statements. [2018-11-23 00:24:06,626 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:24:06 BoogieIcfgContainer [2018-11-23 00:24:06,626 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 00:24:06,627 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 00:24:06,627 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 00:24:06,629 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 00:24:06,629 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:24:04" (1/3) ... [2018-11-23 00:24:06,630 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2114639b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:24:06, skipping insertion in model container [2018-11-23 00:24:06,630 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:24:05" (2/3) ... [2018-11-23 00:24:06,630 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2114639b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:24:06, skipping insertion in model container [2018-11-23 00:24:06,630 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:24:06" (3/3) ... [2018-11-23 00:24:06,632 INFO L112 eAbstractionObserver]: Analyzing ICFG m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 00:24:06,639 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 00:24:06,646 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 00:24:06,656 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 00:24:06,676 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 00:24:06,677 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 00:24:06,677 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 00:24:06,677 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 00:24:06,677 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 00:24:06,677 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 00:24:06,677 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 00:24:06,677 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 00:24:06,677 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 00:24:06,691 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states. [2018-11-23 00:24:06,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2018-11-23 00:24:06,694 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:24:06,695 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:24:06,696 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:24:06,700 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:24:06,700 INFO L82 PathProgramCache]: Analyzing trace with hash 266823146, now seen corresponding path program 1 times [2018-11-23 00:24:06,703 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:24:06,704 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:24:06,723 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:24:06,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:24:06,835 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:24:06,870 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 00:24:06,870 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:24:06,875 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:24:06,876 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 00:24:06,878 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 00:24:06,886 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 00:24:06,886 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:24:06,888 INFO L87 Difference]: Start difference. First operand 147 states. Second operand 3 states. [2018-11-23 00:24:06,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:24:06,947 INFO L93 Difference]: Finished difference Result 387 states and 475 transitions. [2018-11-23 00:24:06,948 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 00:24:06,949 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2018-11-23 00:24:06,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:24:06,958 INFO L225 Difference]: With dead ends: 387 [2018-11-23 00:24:06,958 INFO L226 Difference]: Without dead ends: 240 [2018-11-23 00:24:06,961 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 00:24:06,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2018-11-23 00:24:07,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2018-11-23 00:24:07,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 240 states. [2018-11-23 00:24:07,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 287 transitions. [2018-11-23 00:24:07,009 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 287 transitions. Word has length 17 [2018-11-23 00:24:07,009 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:24:07,009 INFO L480 AbstractCegarLoop]: Abstraction has 240 states and 287 transitions. [2018-11-23 00:24:07,010 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 00:24:07,010 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 287 transitions. [2018-11-23 00:24:07,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 00:24:07,013 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:24:07,013 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:24:07,014 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:24:07,014 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:24:07,014 INFO L82 PathProgramCache]: Analyzing trace with hash 253833288, now seen corresponding path program 1 times [2018-11-23 00:24:07,015 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:24:07,015 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:24:07,040 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:24:07,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 00:24:07,383 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 00:24:07,435 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2018-11-23 00:24:07,436 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 00:24:07,438 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 00:24:07,438 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 00:24:07,439 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 00:24:07,439 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 00:24:07,439 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:24:07,440 INFO L87 Difference]: Start difference. First operand 240 states and 287 transitions. Second operand 5 states. [2018-11-23 00:24:07,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 00:24:07,471 INFO L93 Difference]: Finished difference Result 471 states and 564 transitions. [2018-11-23 00:24:07,471 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 00:24:07,471 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 74 [2018-11-23 00:24:07,472 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 00:24:07,474 INFO L225 Difference]: With dead ends: 471 [2018-11-23 00:24:07,474 INFO L226 Difference]: Without dead ends: 240 [2018-11-23 00:24:07,476 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 00:24:07,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2018-11-23 00:24:07,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2018-11-23 00:24:07,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 240 states. [2018-11-23 00:24:07,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 286 transitions. [2018-11-23 00:24:07,501 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 286 transitions. Word has length 74 [2018-11-23 00:24:07,501 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 00:24:07,501 INFO L480 AbstractCegarLoop]: Abstraction has 240 states and 286 transitions. [2018-11-23 00:24:07,501 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 00:24:07,501 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 286 transitions. [2018-11-23 00:24:07,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 00:24:07,504 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 00:24:07,504 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 00:24:07,504 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 00:24:07,504 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 00:24:07,505 INFO L82 PathProgramCache]: Analyzing trace with hash 2035333223, now seen corresponding path program 1 times [2018-11-23 00:24:07,505 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 00:24:07,505 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c8bb3cb8-5ce9-40bd-81e5-59066c6b9717/bin-2019/uautomizer/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 00:24:07,527 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 00:24:08,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 00:24:09,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 00:24:09,946 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv0 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv0 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv0 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv0 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv0 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv0 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv0 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv0 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv0 32), |#t~string391.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(#t~string108.base)|=(_ bv0 32), |old(#t~string108.offset)|=(_ bv0 32), |old(#t~string289.base)|=(_ bv0 32), |old(#t~string289.offset)|=(_ bv0 32), |old(#t~string292.base)|=(_ bv0 32), |old(#t~string292.offset)|=(_ bv0 32), |old(#t~string306.base)|=(_ bv0 32), |old(#t~string306.offset)|=(_ bv0 32), |old(#t~string309.base)|=(_ bv0 32), |old(#t~string309.offset)|=(_ bv0 32), |old(#t~string312.base)|=(_ bv0 32), |old(#t~string312.offset)|=(_ bv0 32), |old(#t~string387.base)|=(_ bv0 32), |old(#t~string387.offset)|=(_ bv0 32), |old(#t~string388.base)|=(_ bv0 32), |old(#t~string388.offset)|=(_ bv0 32), |old(#t~string391.base)|=(_ bv0 32), |old(#t~string391.offset)|=(_ bv0 32), |old(~#features~0.base)|=(_ bv0 32), |old(~#features~0.offset)|=(_ bv0 32), |old(~#id_table~0.base)|=(_ bv0 32), |old(~#id_table~0.offset)|=(_ bv0 32), |old(~#virtblk_fops~0.base)|=(_ bv0 32), |old(~#virtblk_fops~0.offset)|=(_ bv0 32), |old(~#virtio_blk~0.base)|=(_ bv0 32), |old(~#virtio_blk~0.offset)|=(_ bv0 32), |old(~__mod_virtio_device_table~0.device)|=(_ bv0 32), |old(~__mod_virtio_device_table~0.vendor)|=(_ bv0 32), |old(~index~0)|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#features~0.base|=(_ bv0 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv0 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv0 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv0 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv0 32), ~major~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28bv32);call #t~string289.base, #t~string289.offset := #Ultimate.alloc(22bv32);call #t~string292.base, #t~string292.offset := #Ultimate.alloc(9bv32);call #t~string306.base, #t~string306.offset := #Ultimate.alloc(5bv32);call write~init~intINTTYPE1(118bv8, #t~string306.base, #t~string306.offset, 1bv32);call write~init~intINTTYPE1(100bv8, #t~string306.base, ~bvadd32(1bv32, #t~string306.offset), 1bv32);call write~init~intINTTYPE1(37bv8, #t~string306.base, ~bvadd32(2bv32, #t~string306.offset), 1bv32);call write~init~intINTTYPE1(99bv8, #t~string306.base, ~bvadd32(3bv32, #t~string306.offset), 1bv32);call write~init~intINTTYPE1(0bv8, #t~string306.base, ~bvadd32(4bv32, #t~string306.offset), 1bv32);call #t~string309.base, #t~string309.offset := #Ultimate.alloc(7bv32);call write~init~intINTTYPE1(118bv8, #t~string309.base, #t~string309.offset, 1bv32);call write~init~intINTTYPE1(100bv8, #t~string309.base, ~bvadd32(1bv32, #t~string309.offset), 1bv32);call write~init~intINTTYPE1(37bv8, #t~string309.base, ~bvadd32(2bv32, #t~string309.offset), 1bv32);call write~init~intINTTYPE1(99bv8, #t~string309.base, ~bvadd32(3bv32, #t~string309.offset), 1bv32);call write~init~intINTTYPE1(37bv8, #t~string309.base, ~bvadd32(4bv32, #t~string309.offset), 1bv32);call write~init~intINTTYPE1(99bv8, #t~string309.base, ~bvadd32(5bv32, #t~string309.offset), 1bv32);call write~init~intINTTYPE1(0bv8, #t~string309.base, ~bvadd32(6bv32, #t~string309.offset), 1bv32);call #t~string312.base, #t~string312.offset := #Ultimate.alloc(9bv32);call #t~string387.base, #t~string387.offset := #Ultimate.alloc(11bv32);call #t~string388.base, #t~string388.offset := #Ultimate.alloc(8bv32);call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8bv32);~major~0 := 0bv32;~index~0 := 0bv32;call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36bv32);call write~init~intINTTYPE4(0bv32, ~#features~0.base, ~#features~0.offset, 4bv32);call write~init~intINTTYPE4(2bv32, ~#features~0.base, ~bvadd32(4bv32, ~#features~0.offset), 4bv32);call write~init~intINTTYPE4(1bv32, ~#features~0.base, ~bvadd32(8bv32, ~#features~0.offset), 4bv32);call write~init~intINTTYPE4(4bv32, ~#features~0.base, ~bvadd32(12bv32, ~#features~0.offset), 4bv32);call write~init~intINTTYPE4(5bv32, ~#features~0.base, ~bvadd32(16bv32, ~#features~0.offset), 4bv32);call write~init~intINTTYPE4(6bv32, ~#features~0.base, ~bvadd32(20bv32, ~#features~0.offset), 4bv32);call write~init~intINTTYPE4(7bv32, ~#features~0.base, ~bvadd32(24bv32, ~#features~0.offset), 4bv32);call write~init~intINTTYPE4(9bv32, ~#features~0.base, ~bvadd32(28bv32, ~#features~0.offset), 4bv32);call write~init~intINTTYPE4(10bv32, ~#features~0.base, ~bvadd32(32bv32, ~#features~0.offset), 4bv32);~LDV_IN_INTERRUPT~0 := 0bv32;~ldv_blk_rq~0 := 0bv32;call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(8bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, ~bvadd32(16bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(24bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(32bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(40bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(48bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(56bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(64bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, ~bvadd32(72bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(80bv32, ~#virtblk_fops~0.offset), 8bv32);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, ~bvadd32(88bv32, ~#virtblk_fops~0.offset), 8bv32);call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16bv32);call write~init~intINTTYPE4(2bv32, ~#id_table~0.base, ~#id_table~0.offset, 4bv32);call write~init~intINTTYPE4(4294967295bv32, ~#id_table~0.base, ~bvadd32(4bv32, ~#id_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#id_table~0.base, ~bvadd32(8bv32, ~#id_table~0.offset), 4bv32);call write~init~intINTTYPE4(0bv32, ~#id_table~0.base, ~bvadd32(12bv32, ~#id_table~0.offset), 4bv32);call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141bv32);call write~init~$Pointer$(#t~string387.base, #t~string387.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(8bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, ~bvadd32(16bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(24bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~intINTTYPE1(0bv8, ~#virtio_blk~0.base, ~bvadd32(32bv32, ~#virtio_blk~0.offset), 1bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(33bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(41bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(49bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(57bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(65bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(73bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(81bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(89bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, ~bvadd32(97bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, ~bvadd32(105bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~intINTTYPE4(9bv32, ~#virtio_blk~0.base, ~bvadd32(113bv32, ~#virtio_blk~0.offset), 4bv32);call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, ~bvadd32(117bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, ~bvadd32(125bv32, ~#virtio_blk~0.offset), 8bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(133bv32, ~#virtio_blk~0.offset), 8bv32);~__mod_virtio_device_table~0.device := 0bv32;~__mod_virtio_device_table~0.vendor := 0bv32; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(#t~string108.base)|=(_ bv0 32), |old(#t~string108.offset)|=(_ bv0 32), |old(#t~string289.base)|=(_ bv0 32), |old(#t~string289.offset)|=(_ bv0 32), |old(#t~string292.base)|=(_ bv0 32), |old(#t~string292.offset)|=(_ bv0 32), |old(#t~string306.base)|=(_ bv0 32), |old(#t~string306.offset)|=(_ bv0 32), |old(#t~string309.base)|=(_ bv0 32), |old(#t~string309.offset)|=(_ bv0 32), |old(#t~string312.base)|=(_ bv0 32), |old(#t~string312.offset)|=(_ bv0 32), |old(#t~string387.base)|=(_ bv0 32), |old(#t~string387.offset)|=(_ bv0 32), |old(#t~string388.base)|=(_ bv0 32), |old(#t~string388.offset)|=(_ bv0 32), |old(#t~string391.base)|=(_ bv0 32), |old(#t~string391.offset)|=(_ bv0 32), |old(~#features~0.base)|=(_ bv0 32), |old(~#features~0.offset)|=(_ bv0 32), |old(~#id_table~0.base)|=(_ bv0 32), |old(~#id_table~0.offset)|=(_ bv0 32), |old(~#virtblk_fops~0.base)|=(_ bv0 32), |old(~#virtblk_fops~0.offset)|=(_ bv0 32), |old(~#virtio_blk~0.base)|=(_ bv0 32), |old(~#virtio_blk~0.offset)|=(_ bv0 32), |old(~__mod_virtio_device_table~0.device)|=(_ bv0 32), |old(~__mod_virtio_device_table~0.vendor)|=(_ bv0 32), |old(~index~0)|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv0 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(#t~string108.base)|=(_ bv0 32), |old(#t~string108.offset)|=(_ bv0 32), |old(#t~string289.base)|=(_ bv0 32), |old(#t~string289.offset)|=(_ bv0 32), |old(#t~string292.base)|=(_ bv0 32), |old(#t~string292.offset)|=(_ bv0 32), |old(#t~string306.base)|=(_ bv0 32), |old(#t~string306.offset)|=(_ bv0 32), |old(#t~string309.base)|=(_ bv0 32), |old(#t~string309.offset)|=(_ bv0 32), |old(#t~string312.base)|=(_ bv0 32), |old(#t~string312.offset)|=(_ bv0 32), |old(#t~string387.base)|=(_ bv0 32), |old(#t~string387.offset)|=(_ bv0 32), |old(#t~string388.base)|=(_ bv0 32), |old(#t~string388.offset)|=(_ bv0 32), |old(#t~string391.base)|=(_ bv0 32), |old(#t~string391.offset)|=(_ bv0 32), |old(~#features~0.base)|=(_ bv0 32), |old(~#features~0.offset)|=(_ bv0 32), |old(~#id_table~0.base)|=(_ bv0 32), |old(~#id_table~0.offset)|=(_ bv0 32), |old(~#virtblk_fops~0.base)|=(_ bv0 32), |old(~#virtblk_fops~0.offset)|=(_ bv0 32), |old(~#virtio_blk~0.base)|=(_ bv0 32), |old(~#virtio_blk~0.offset)|=(_ bv0 32), |old(~__mod_virtio_device_table~0.device)|=(_ bv0 32), |old(~__mod_virtio_device_table~0.vendor)|=(_ bv0 32), |old(~index~0)|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv0 32), ~major~0=(_ bv0 32)] [?] RET #268#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv0 32), ~major~0=(_ bv0 32)] [?] CALL call #t~ret405 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv0 32), ~major~0=(_ bv0 32)] [?] havoc ~var_group1~0.base, ~var_group1~0.offset;havoc ~var_virtblk_ioctl_5_p1~0;havoc ~var_virtblk_ioctl_5_p2~0;havoc ~var_virtblk_ioctl_5_p3~0;havoc ~var_group2~0.base, ~var_group2~0.offset;havoc ~tmp~21;havoc ~tmp___0~13;havoc ~tmp___1~8;~LDV_IN_INTERRUPT~0 := 1bv32;call ldv_initialize();call ldv_handler_precall(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call #t~ret392 := init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] havoc ~tmp~20;call #t~ret389 := register_blkdev(0bv32, #t~string388.base, #t~string388.offset);~major~0 := #t~ret389;havoc #t~ret389; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32)] [?] assume !~bvslt32(~major~0, 0bv32);call #t~ret390 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset);~tmp~20 := #t~ret390;havoc #t~ret390;#res := ~tmp~20; VAL [init_~tmp~20=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |init_#res|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [init_~tmp~20=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |init_#res|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #226#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |main_#t~ret392|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~tmp~21 := #t~ret392;havoc #t~ret392; VAL [main_~tmp~21=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume !(0bv32 != ~tmp~21); VAL [main_~tmp~21=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~tmp___1~8 := #t~nondet397;havoc #t~nondet397; VAL [main_~tmp___1~8=(_ bv1 32), main_~tmp~21=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume 0bv32 != ~tmp___1~8; VAL [main_~tmp___1~8=(_ bv1 32), main_~tmp~21=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~tmp___0~13 := #t~nondet393;havoc #t~nondet393;#t~switch394 := 0bv32 == ~tmp___0~13; VAL [main_~tmp___0~13=(_ bv0 32), main_~tmp___1~8=(_ bv1 32), main_~tmp~21=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume #t~switch394;call ldv_handler_precall(); VAL [main_~tmp___0~13=(_ bv0 32), main_~tmp___1~8=(_ bv1 32), main_~tmp~21=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_ioctl_#in~bdev.base|=(_ bv3221227450 32), |virtblk_ioctl_#in~bdev.offset|=(_ bv4294967068 32), |virtblk_ioctl_#in~cmd|=(_ bv1447184708 32), |virtblk_ioctl_#in~data|=(_ bv0 64), |virtblk_ioctl_#in~mode|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~bdev.base, ~bdev.offset := #in~bdev.base, #in~bdev.offset;~mode := #in~mode;~cmd := #in~cmd;~data := #in~data;havoc ~disk~0.base, ~disk~0.offset;havoc ~vblk~3.base, ~vblk~3.offset;havoc ~usr_data~0.base, ~usr_data~0.offset;call ~#id_str~0.base, ~#id_str~0.offset := #Ultimate.alloc(20bv32);havoc ~err~1;havoc ~tmp~16;havoc ~tmp___0~10;havoc ~tmp___1~6;havoc ~tmp___2~2;call #t~mem264.base, #t~mem264.offset := read~$Pointer$(~bdev.base, ~bvadd32(240bv32, ~bdev.offset), 8bv32);~disk~0.base, ~disk~0.offset := #t~mem264.base, #t~mem264.offset;havoc #t~mem264.base, #t~mem264.offset;call #t~mem265.base, #t~mem265.offset := read~$Pointer$(~disk~0.base, ~bvadd32(1075bv32, ~disk~0.offset), 8bv32);~vblk~3.base, ~vblk~3.offset := #t~mem265.base, #t~mem265.offset;havoc #t~mem265.base, #t~mem265.offset; VAL [virtblk_ioctl_~bdev.base=(_ bv3221227450 32), virtblk_ioctl_~bdev.offset=(_ bv4294967068 32), virtblk_ioctl_~cmd=(_ bv1447184708 32), virtblk_ioctl_~data=(_ bv0 64), virtblk_ioctl_~disk~0.base=(_ bv2147485626 32), virtblk_ioctl_~disk~0.offset=(_ bv4294966233 32), virtblk_ioctl_~mode=(_ bv0 32), virtblk_ioctl_~vblk~3.base=(_ bv1978 32), virtblk_ioctl_~vblk~3.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_ioctl_#in~bdev.base|=(_ bv3221227450 32), |virtblk_ioctl_#in~bdev.offset|=(_ bv4294967068 32), |virtblk_ioctl_#in~cmd|=(_ bv1447184708 32), |virtblk_ioctl_#in~data|=(_ bv0 64), |virtblk_ioctl_#in~mode|=(_ bv0 32), |virtblk_ioctl_~#id_str~0.base|=(_ bv402653395 32), |virtblk_ioctl_~#id_str~0.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume 1447184708bv32 == ~cmd;~usr_data~0.base, ~usr_data~0.offset := 0bv32, ~data[32:0]; VAL [virtblk_ioctl_~bdev.base=(_ bv3221227450 32), virtblk_ioctl_~bdev.offset=(_ bv4294967068 32), virtblk_ioctl_~cmd=(_ bv1447184708 32), virtblk_ioctl_~data=(_ bv0 64), virtblk_ioctl_~disk~0.base=(_ bv2147485626 32), virtblk_ioctl_~disk~0.offset=(_ bv4294966233 32), virtblk_ioctl_~mode=(_ bv0 32), virtblk_ioctl_~usr_data~0.base=(_ bv0 32), virtblk_ioctl_~usr_data~0.offset=(_ bv0 32), virtblk_ioctl_~vblk~3.base=(_ bv1978 32), virtblk_ioctl_~vblk~3.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_ioctl_#in~bdev.base|=(_ bv3221227450 32), |virtblk_ioctl_#in~bdev.offset|=(_ bv4294967068 32), |virtblk_ioctl_#in~cmd|=(_ bv1447184708 32), |virtblk_ioctl_#in~data|=(_ bv0 64), |virtblk_ioctl_#in~mode|=(_ bv0 32), |virtblk_ioctl_~#id_str~0.base|=(_ bv402653395 32), |virtblk_ioctl_~#id_str~0.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~disk.base, ~disk.offset := #in~disk.base, #in~disk.offset;~id_str.base, ~id_str.offset := #in~id_str.base, #in~id_str.offset;havoc ~vblk~2.base, ~vblk~2.offset;havoc ~req~1.base, ~req~1.offset;havoc ~bio~0.base, ~bio~0.offset;havoc ~tmp~15;havoc ~tmp___0~9;havoc ~tmp___1~5;havoc ~tmp___2~1;havoc ~tmp___3~1;call #t~mem249.base, #t~mem249.offset := read~$Pointer$(~disk.base, ~bvadd32(1075bv32, ~disk.offset), 8bv32);~vblk~2.base, ~vblk~2.offset := #t~mem249.base, #t~mem249.offset;havoc #t~mem249.base, #t~mem249.offset;call #t~mem250.base, #t~mem250.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32);call #t~mem251.base, #t~mem251.offset := read~$Pointer$(#t~mem250.base, ~bvadd32(1067bv32, #t~mem250.offset), 8bv32);call #t~ret252.base, #t~ret252.offset := bio_map_kern(#t~mem251.base, #t~mem251.offset, ~id_str.base, ~id_str.offset, 20bv32, 208bv32);~bio~0.base, ~bio~0.offset := #t~ret252.base, #t~ret252.offset;havoc #t~ret252.base, #t~ret252.offset;havoc #t~mem250.base, #t~mem250.offset;havoc #t~mem251.base, #t~mem251.offset; VAL [virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv0 32), |IS_ERR_#in~ptr.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~24; VAL [IS_ERR_~ptr.base=(_ bv0 32), IS_ERR_~ptr.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv0 32), |IS_ERR_#in~ptr.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_is_err_#in~ptr.base|=(_ bv0 32), |ldv_is_err_#in~ptr.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr.base, ~ptr.offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [ldv_is_err_~ptr.base=(_ bv0 32), ldv_is_err_~ptr.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_is_err_#in~ptr.base|=(_ bv0 32), |ldv_is_err_#in~ptr.offset|=(_ bv0 32), |ldv_is_err_#res|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [ldv_is_err_~ptr.base=(_ bv0 32), ldv_is_err_~ptr.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_is_err_#in~ptr.base|=(_ bv0 32), |ldv_is_err_#in~ptr.offset|=(_ bv0 32), |ldv_is_err_#res|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #272#return; VAL [IS_ERR_~ptr.base=(_ bv0 32), IS_ERR_~ptr.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv0 32), |IS_ERR_#in~ptr.offset|=(_ bv0 32), |IS_ERR_#t~ret400|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~tmp~24 := #t~ret400;havoc #t~ret400;#res := ~tmp~24; VAL [IS_ERR_~ptr.base=(_ bv0 32), IS_ERR_~ptr.offset=(_ bv0 32), IS_ERR_~tmp~24=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv0 32), |IS_ERR_#in~ptr.offset|=(_ bv0 32), |IS_ERR_#res|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [IS_ERR_~ptr.base=(_ bv0 32), IS_ERR_~ptr.offset=(_ bv0 32), IS_ERR_~tmp~24=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv0 32), |IS_ERR_#in~ptr.offset|=(_ bv0 32), |IS_ERR_#res|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #256#return; VAL [virtblk_get_id_~bio~0.base=(_ bv0 32), virtblk_get_id_~bio~0.offset=(_ bv0 32), virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |virtblk_get_id_#t~ret253|=(_ bv0 64), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~tmp___0~9 := #t~ret253;havoc #t~ret253; VAL [virtblk_get_id_~bio~0.base=(_ bv0 32), virtblk_get_id_~bio~0.offset=(_ bv0 32), virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~tmp___0~9=(_ bv0 64), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume !(0bv64 != ~tmp___0~9);call #t~mem255.base, #t~mem255.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32);call #t~mem256.base, #t~mem256.offset := read~$Pointer$(#t~mem255.base, ~bvadd32(1067bv32, #t~mem255.offset), 8bv32); VAL [virtblk_get_id_~bio~0.base=(_ bv0 32), virtblk_get_id_~bio~0.offset=(_ bv0 32), virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~tmp___0~9=(_ bv0 64), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |virtblk_get_id_#t~mem255.base|=(_ bv1978 32), |virtblk_get_id_#t~mem255.offset|=(_ bv4294966241 32), |virtblk_get_id_#t~mem256.base|=(_ bv1978 32), |virtblk_get_id_#t~mem256.offset|=(_ bv4294966241 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=(_ bv1978 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=(_ bv4294966241 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg3|=(_ bv208 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~ldv_func_arg1.base, ~ldv_func_arg1.offset := #in~ldv_func_arg1.base, #in~ldv_func_arg1.offset;~ldv_func_arg2.base, ~ldv_func_arg2.offset := #in~ldv_func_arg2.base, #in~ldv_func_arg2.offset;~ldv_func_arg3 := #in~ldv_func_arg3;havoc ~ldv_func_res~0.base, ~ldv_func_res~0.offset;havoc ~tmp~25.base, ~tmp~25.offset;call #t~ret401.base, #t~ret401.offset := blk_make_request(~ldv_func_arg1.base, ~ldv_func_arg1.offset, ~ldv_func_arg2.base, ~ldv_func_arg2.offset, ~ldv_func_arg3);~tmp~25.base, ~tmp~25.offset := #t~ret401.base, #t~ret401.offset;havoc #t~ret401.base, #t~ret401.offset;~ldv_func_res~0.base, ~ldv_func_res~0.offset := ~tmp~25.base, ~tmp~25.offset; VAL [ldv_blk_make_request_5_~ldv_func_arg1.base=(_ bv1978 32), ldv_blk_make_request_5_~ldv_func_arg1.offset=(_ bv4294966241 32), ldv_blk_make_request_5_~ldv_func_arg2.base=(_ bv0 32), ldv_blk_make_request_5_~ldv_func_arg2.offset=(_ bv0 32), ldv_blk_make_request_5_~ldv_func_arg3=(_ bv208 32), ldv_blk_make_request_5_~ldv_func_res~0.base=(_ bv1978 32), ldv_blk_make_request_5_~ldv_func_res~0.offset=(_ bv4294967244 32), ldv_blk_make_request_5_~tmp~25.base=(_ bv1978 32), ldv_blk_make_request_5_~tmp~25.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=(_ bv1978 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=(_ bv4294966241 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg3|=(_ bv208 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_get_blk_rq_#in~mask|=(_ bv208 32), |ldv_get_blk_rq_#in~res.base|=(_ bv1978 32), |ldv_get_blk_rq_#in~res.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~res.base, ~res.offset := #in~res.base, #in~res.offset;~mask := #in~mask;havoc ~tmp~28; VAL [ldv_get_blk_rq_~mask=(_ bv208 32), ldv_get_blk_rq_~res.base=(_ bv1978 32), ldv_get_blk_rq_~res.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_get_blk_rq_#in~mask|=(_ bv208 32), |ldv_get_blk_rq_#in~res.base|=(_ bv1978 32), |ldv_get_blk_rq_#in~res.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume 0bv32 == ~ldv_blk_rq~0; VAL [ldv_get_blk_rq_~mask=(_ bv208 32), ldv_get_blk_rq_~res.base=(_ bv1978 32), ldv_get_blk_rq_~res.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_get_blk_rq_#in~mask|=(_ bv208 32), |ldv_get_blk_rq_#in~res.base|=(_ bv1978 32), |ldv_get_blk_rq_#in~res.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv0 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume (16bv32 == ~mask || 208bv32 == ~mask) || 16bv32 == ~mask;~ldv_blk_rq~0 := 1bv32; VAL [ldv_get_blk_rq_~mask=(_ bv208 32), ldv_get_blk_rq_~res.base=(_ bv1978 32), ldv_get_blk_rq_~res.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_get_blk_rq_#in~mask|=(_ bv208 32), |ldv_get_blk_rq_#in~res.base|=(_ bv1978 32), |ldv_get_blk_rq_#in~res.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [ldv_get_blk_rq_~mask=(_ bv208 32), ldv_get_blk_rq_~res.base=(_ bv1978 32), ldv_get_blk_rq_~res.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_get_blk_rq_#in~mask|=(_ bv208 32), |ldv_get_blk_rq_#in~res.base|=(_ bv1978 32), |ldv_get_blk_rq_#in~res.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #254#return; VAL [ldv_blk_make_request_5_~ldv_func_arg1.base=(_ bv1978 32), ldv_blk_make_request_5_~ldv_func_arg1.offset=(_ bv4294966241 32), ldv_blk_make_request_5_~ldv_func_arg2.base=(_ bv0 32), ldv_blk_make_request_5_~ldv_func_arg2.offset=(_ bv0 32), ldv_blk_make_request_5_~ldv_func_arg3=(_ bv208 32), ldv_blk_make_request_5_~ldv_func_res~0.base=(_ bv1978 32), ldv_blk_make_request_5_~ldv_func_res~0.offset=(_ bv4294967244 32), ldv_blk_make_request_5_~tmp~25.base=(_ bv1978 32), ldv_blk_make_request_5_~tmp~25.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=(_ bv1978 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=(_ bv4294966241 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg3|=(_ bv208 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] #res.base, #res.offset := ~ldv_func_res~0.base, ~ldv_func_res~0.offset; VAL [ldv_blk_make_request_5_~ldv_func_arg1.base=(_ bv1978 32), ldv_blk_make_request_5_~ldv_func_arg1.offset=(_ bv4294966241 32), ldv_blk_make_request_5_~ldv_func_arg2.base=(_ bv0 32), ldv_blk_make_request_5_~ldv_func_arg2.offset=(_ bv0 32), ldv_blk_make_request_5_~ldv_func_arg3=(_ bv208 32), ldv_blk_make_request_5_~ldv_func_res~0.base=(_ bv1978 32), ldv_blk_make_request_5_~ldv_func_res~0.offset=(_ bv4294967244 32), ldv_blk_make_request_5_~tmp~25.base=(_ bv1978 32), ldv_blk_make_request_5_~tmp~25.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=(_ bv1978 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=(_ bv4294966241 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg3|=(_ bv208 32), |ldv_blk_make_request_5_#res.base|=(_ bv1978 32), |ldv_blk_make_request_5_#res.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [ldv_blk_make_request_5_~ldv_func_arg1.base=(_ bv1978 32), ldv_blk_make_request_5_~ldv_func_arg1.offset=(_ bv4294966241 32), ldv_blk_make_request_5_~ldv_func_arg2.base=(_ bv0 32), ldv_blk_make_request_5_~ldv_func_arg2.offset=(_ bv0 32), ldv_blk_make_request_5_~ldv_func_arg3=(_ bv208 32), ldv_blk_make_request_5_~ldv_func_res~0.base=(_ bv1978 32), ldv_blk_make_request_5_~ldv_func_res~0.offset=(_ bv4294967244 32), ldv_blk_make_request_5_~tmp~25.base=(_ bv1978 32), ldv_blk_make_request_5_~tmp~25.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.base|=(_ bv1978 32), |ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=(_ bv4294966241 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.base|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=(_ bv0 32), |ldv_blk_make_request_5_#in~ldv_func_arg3|=(_ bv208 32), |ldv_blk_make_request_5_#res.base|=(_ bv1978 32), |ldv_blk_make_request_5_#res.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #260#return; VAL [virtblk_get_id_~bio~0.base=(_ bv0 32), virtblk_get_id_~bio~0.offset=(_ bv0 32), virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~tmp___0~9=(_ bv0 64), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |virtblk_get_id_#t~mem255.base|=(_ bv1978 32), |virtblk_get_id_#t~mem255.offset|=(_ bv4294966241 32), |virtblk_get_id_#t~mem256.base|=(_ bv1978 32), |virtblk_get_id_#t~mem256.offset|=(_ bv4294966241 32), |virtblk_get_id_#t~ret257.base|=(_ bv1978 32), |virtblk_get_id_#t~ret257.offset|=(_ bv4294967244 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~req~1.base, ~req~1.offset := #t~ret257.base, #t~ret257.offset;havoc #t~ret257.base, #t~ret257.offset;havoc #t~mem255.base, #t~mem255.offset;havoc #t~mem256.base, #t~mem256.offset; VAL [virtblk_get_id_~bio~0.base=(_ bv0 32), virtblk_get_id_~bio~0.offset=(_ bv0 32), virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~req~1.base=(_ bv1978 32), virtblk_get_id_~req~1.offset=(_ bv4294967244 32), virtblk_get_id_~tmp___0~9=(_ bv0 64), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv1978 32), |IS_ERR_#in~ptr.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~24; VAL [IS_ERR_~ptr.base=(_ bv1978 32), IS_ERR_~ptr.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv1978 32), |IS_ERR_#in~ptr.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_is_err_#in~ptr.base|=(_ bv1978 32), |ldv_is_err_#in~ptr.offset|=(_ bv4294967244 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr.base, ~ptr.offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [ldv_is_err_~ptr.base=(_ bv1978 32), ldv_is_err_~ptr.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_is_err_#in~ptr.base|=(_ bv1978 32), |ldv_is_err_#in~ptr.offset|=(_ bv4294967244 32), |ldv_is_err_#res|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [ldv_is_err_~ptr.base=(_ bv1978 32), ldv_is_err_~ptr.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |ldv_is_err_#in~ptr.base|=(_ bv1978 32), |ldv_is_err_#in~ptr.offset|=(_ bv4294967244 32), |ldv_is_err_#res|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #272#return; VAL [IS_ERR_~ptr.base=(_ bv1978 32), IS_ERR_~ptr.offset=(_ bv4294967244 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv1978 32), |IS_ERR_#in~ptr.offset|=(_ bv4294967244 32), |IS_ERR_#t~ret400|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~tmp~24 := #t~ret400;havoc #t~ret400;#res := ~tmp~24; VAL [IS_ERR_~ptr.base=(_ bv1978 32), IS_ERR_~ptr.offset=(_ bv4294967244 32), IS_ERR_~tmp~24=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv1978 32), |IS_ERR_#in~ptr.offset|=(_ bv4294967244 32), |IS_ERR_#res|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [IS_ERR_~ptr.base=(_ bv1978 32), IS_ERR_~ptr.offset=(_ bv4294967244 32), IS_ERR_~tmp~24=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |IS_ERR_#in~ptr.base|=(_ bv1978 32), |IS_ERR_#in~ptr.offset|=(_ bv4294967244 32), |IS_ERR_#res|=(_ bv0 64), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #262#return; VAL [virtblk_get_id_~bio~0.base=(_ bv0 32), virtblk_get_id_~bio~0.offset=(_ bv0 32), virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~req~1.base=(_ bv1978 32), virtblk_get_id_~req~1.offset=(_ bv4294967244 32), virtblk_get_id_~tmp___0~9=(_ bv0 64), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |virtblk_get_id_#t~ret258|=(_ bv0 64), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~tmp___2~1 := #t~ret258;havoc #t~ret258; VAL [virtblk_get_id_~bio~0.base=(_ bv0 32), virtblk_get_id_~bio~0.offset=(_ bv0 32), virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~req~1.base=(_ bv1978 32), virtblk_get_id_~req~1.offset=(_ bv4294967244 32), virtblk_get_id_~tmp___0~9=(_ bv0 64), virtblk_get_id_~tmp___2~1=(_ bv0 64), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume !(0bv64 != ~tmp___2~1);call write~intINTTYPE4(7bv32, ~req~1.base, ~bvadd32(64bv32, ~req~1.offset), 4bv32);call #t~mem260.base, #t~mem260.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32);call #t~mem261.base, #t~mem261.offset := read~$Pointer$(#t~mem260.base, ~bvadd32(1067bv32, #t~mem260.offset), 8bv32);call #t~mem262.base, #t~mem262.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32);call #t~ret263 := blk_execute_rq(#t~mem261.base, #t~mem261.offset, #t~mem262.base, #t~mem262.offset, ~req~1.base, ~req~1.offset, 0bv32);~tmp___3~1 := #t~ret263;havoc #t~ret263;havoc #t~mem260.base, #t~mem260.offset;havoc #t~mem262.base, #t~mem262.offset;havoc #t~mem261.base, #t~mem261.offset;#res := ~tmp___3~1; VAL [virtblk_get_id_~bio~0.base=(_ bv0 32), virtblk_get_id_~bio~0.offset=(_ bv0 32), virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~req~1.base=(_ bv1978 32), virtblk_get_id_~req~1.offset=(_ bv4294967244 32), virtblk_get_id_~tmp___0~9=(_ bv0 64), virtblk_get_id_~tmp___2~1=(_ bv0 64), virtblk_get_id_~tmp___3~1=(_ bv1 32), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |virtblk_get_id_#res|=(_ bv1 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [virtblk_get_id_~bio~0.base=(_ bv0 32), virtblk_get_id_~bio~0.offset=(_ bv0 32), virtblk_get_id_~disk.base=(_ bv2147485626 32), virtblk_get_id_~disk.offset=(_ bv4294966233 32), virtblk_get_id_~id_str.base=(_ bv402653395 32), virtblk_get_id_~id_str.offset=(_ bv0 32), virtblk_get_id_~req~1.base=(_ bv1978 32), virtblk_get_id_~req~1.offset=(_ bv4294967244 32), virtblk_get_id_~tmp___0~9=(_ bv0 64), virtblk_get_id_~tmp___2~1=(_ bv0 64), virtblk_get_id_~tmp___3~1=(_ bv1 32), virtblk_get_id_~vblk~2.base=(_ bv1978 32), virtblk_get_id_~vblk~2.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_get_id_#in~disk.base|=(_ bv2147485626 32), |virtblk_get_id_#in~disk.offset|=(_ bv4294966233 32), |virtblk_get_id_#in~id_str.base|=(_ bv402653395 32), |virtblk_get_id_#in~id_str.offset|=(_ bv0 32), |virtblk_get_id_#res|=(_ bv1 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #246#return; VAL [virtblk_ioctl_~bdev.base=(_ bv3221227450 32), virtblk_ioctl_~bdev.offset=(_ bv4294967068 32), virtblk_ioctl_~cmd=(_ bv1447184708 32), virtblk_ioctl_~data=(_ bv0 64), virtblk_ioctl_~disk~0.base=(_ bv2147485626 32), virtblk_ioctl_~disk~0.offset=(_ bv4294966233 32), virtblk_ioctl_~mode=(_ bv0 32), virtblk_ioctl_~usr_data~0.base=(_ bv0 32), virtblk_ioctl_~usr_data~0.offset=(_ bv0 32), virtblk_ioctl_~vblk~3.base=(_ bv1978 32), virtblk_ioctl_~vblk~3.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_ioctl_#in~bdev.base|=(_ bv3221227450 32), |virtblk_ioctl_#in~bdev.offset|=(_ bv4294967068 32), |virtblk_ioctl_#in~cmd|=(_ bv1447184708 32), |virtblk_ioctl_#in~data|=(_ bv0 64), |virtblk_ioctl_#in~mode|=(_ bv0 32), |virtblk_ioctl_#t~ret266|=(_ bv1 32), |virtblk_ioctl_~#id_str~0.base|=(_ bv402653395 32), |virtblk_ioctl_~#id_str~0.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~err~1 := #t~ret266;havoc #t~ret266; VAL [virtblk_ioctl_~bdev.base=(_ bv3221227450 32), virtblk_ioctl_~bdev.offset=(_ bv4294967068 32), virtblk_ioctl_~cmd=(_ bv1447184708 32), virtblk_ioctl_~data=(_ bv0 64), virtblk_ioctl_~disk~0.base=(_ bv2147485626 32), virtblk_ioctl_~disk~0.offset=(_ bv4294966233 32), virtblk_ioctl_~err~1=(_ bv1 32), virtblk_ioctl_~mode=(_ bv0 32), virtblk_ioctl_~usr_data~0.base=(_ bv0 32), virtblk_ioctl_~usr_data~0.offset=(_ bv0 32), virtblk_ioctl_~vblk~3.base=(_ bv1978 32), virtblk_ioctl_~vblk~3.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_ioctl_#in~bdev.base|=(_ bv3221227450 32), |virtblk_ioctl_#in~bdev.offset|=(_ bv4294967068 32), |virtblk_ioctl_#in~cmd|=(_ bv1447184708 32), |virtblk_ioctl_#in~data|=(_ bv0 64), |virtblk_ioctl_#in~mode|=(_ bv0 32), |virtblk_ioctl_~#id_str~0.base|=(_ bv402653395 32), |virtblk_ioctl_~#id_str~0.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume !(0bv32 == ~err~1); VAL [virtblk_ioctl_~bdev.base=(_ bv3221227450 32), virtblk_ioctl_~bdev.offset=(_ bv4294967068 32), virtblk_ioctl_~cmd=(_ bv1447184708 32), virtblk_ioctl_~data=(_ bv0 64), virtblk_ioctl_~disk~0.base=(_ bv2147485626 32), virtblk_ioctl_~disk~0.offset=(_ bv4294966233 32), virtblk_ioctl_~err~1=(_ bv1 32), virtblk_ioctl_~mode=(_ bv0 32), virtblk_ioctl_~usr_data~0.base=(_ bv0 32), virtblk_ioctl_~usr_data~0.offset=(_ bv0 32), virtblk_ioctl_~vblk~3.base=(_ bv1978 32), virtblk_ioctl_~vblk~3.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_ioctl_#in~bdev.base|=(_ bv3221227450 32), |virtblk_ioctl_#in~bdev.offset|=(_ bv4294967068 32), |virtblk_ioctl_#in~cmd|=(_ bv1447184708 32), |virtblk_ioctl_#in~data|=(_ bv0 64), |virtblk_ioctl_#in~mode|=(_ bv0 32), |virtblk_ioctl_~#id_str~0.base|=(_ bv402653395 32), |virtblk_ioctl_~#id_str~0.offset|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] #res := ~err~1;call ULTIMATE.dealloc(~#id_str~0.base, ~#id_str~0.offset);havoc ~#id_str~0.base, ~#id_str~0.offset; VAL [virtblk_ioctl_~bdev.base=(_ bv3221227450 32), virtblk_ioctl_~bdev.offset=(_ bv4294967068 32), virtblk_ioctl_~cmd=(_ bv1447184708 32), virtblk_ioctl_~data=(_ bv0 64), virtblk_ioctl_~disk~0.base=(_ bv2147485626 32), virtblk_ioctl_~disk~0.offset=(_ bv4294966233 32), virtblk_ioctl_~err~1=(_ bv1 32), virtblk_ioctl_~mode=(_ bv0 32), virtblk_ioctl_~usr_data~0.base=(_ bv0 32), virtblk_ioctl_~usr_data~0.offset=(_ bv0 32), virtblk_ioctl_~vblk~3.base=(_ bv1978 32), virtblk_ioctl_~vblk~3.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_ioctl_#in~bdev.base|=(_ bv3221227450 32), |virtblk_ioctl_#in~bdev.offset|=(_ bv4294967068 32), |virtblk_ioctl_#in~cmd|=(_ bv1447184708 32), |virtblk_ioctl_#in~data|=(_ bv0 64), |virtblk_ioctl_#in~mode|=(_ bv0 32), |virtblk_ioctl_#res|=(_ bv1 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [virtblk_ioctl_~bdev.base=(_ bv3221227450 32), virtblk_ioctl_~bdev.offset=(_ bv4294967068 32), virtblk_ioctl_~cmd=(_ bv1447184708 32), virtblk_ioctl_~data=(_ bv0 64), virtblk_ioctl_~disk~0.base=(_ bv2147485626 32), virtblk_ioctl_~disk~0.offset=(_ bv4294966233 32), virtblk_ioctl_~err~1=(_ bv1 32), virtblk_ioctl_~mode=(_ bv0 32), virtblk_ioctl_~usr_data~0.base=(_ bv0 32), virtblk_ioctl_~usr_data~0.offset=(_ bv0 32), virtblk_ioctl_~vblk~3.base=(_ bv1978 32), virtblk_ioctl_~vblk~3.offset=(_ bv4294967236 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |virtblk_ioctl_#in~bdev.base|=(_ bv3221227450 32), |virtblk_ioctl_#in~bdev.offset|=(_ bv4294967068 32), |virtblk_ioctl_#in~cmd|=(_ bv1447184708 32), |virtblk_ioctl_#in~data|=(_ bv0 64), |virtblk_ioctl_#in~mode|=(_ bv0 32), |virtblk_ioctl_#res|=(_ bv1 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #228#return; VAL [main_~tmp___0~13=(_ bv0 32), main_~tmp___1~8=(_ bv1 32), main_~tmp~21=(_ bv0 32), main_~var_group1~0.base=(_ bv3221227450 32), main_~var_group1~0.offset=(_ bv4294967068 32), main_~var_virtblk_ioctl_5_p1~0=(_ bv0 32), main_~var_virtblk_ioctl_5_p2~0=(_ bv1447184708 32), main_~var_virtblk_ioctl_5_p3~0=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |main_#t~ret395|=(_ bv1 32), |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] havoc #t~ret395; VAL [main_~tmp___0~13=(_ bv0 32), main_~tmp___1~8=(_ bv1 32), main_~tmp~21=(_ bv0 32), main_~var_group1~0.base=(_ bv3221227450 32), main_~var_group1~0.offset=(_ bv4294967068 32), main_~var_virtblk_ioctl_5_p1~0=(_ bv0 32), main_~var_virtblk_ioctl_5_p2~0=(_ bv1447184708 32), main_~var_virtblk_ioctl_5_p3~0=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] ~tmp___1~8 := #t~nondet397;havoc #t~nondet397; VAL [main_~tmp___0~13=(_ bv0 32), main_~tmp___1~8=(_ bv0 32), main_~tmp~21=(_ bv0 32), main_~var_group1~0.base=(_ bv3221227450 32), main_~var_group1~0.offset=(_ bv4294967068 32), main_~var_virtblk_ioctl_5_p1~0=(_ bv0 32), main_~var_virtblk_ioctl_5_p2~0=(_ bv1447184708 32), main_~var_virtblk_ioctl_5_p3~0=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume !(0bv32 != ~tmp___1~8);call ldv_handler_precall(); VAL [main_~tmp___0~13=(_ bv0 32), main_~tmp___1~8=(_ bv0 32), main_~tmp~21=(_ bv0 32), main_~var_group1~0.base=(_ bv3221227450 32), main_~var_group1~0.offset=(_ bv4294967068 32), main_~var_virtblk_ioctl_5_p1~0=(_ bv0 32), main_~var_virtblk_ioctl_5_p2~0=(_ bv1447184708 32), main_~var_virtblk_ioctl_5_p3~0=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call fini(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] call unregister_blkdev(~major~0, #t~string391.base, #t~string391.offset);call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] RET #232#return; VAL [main_~tmp___0~13=(_ bv0 32), main_~tmp___1~8=(_ bv0 32), main_~tmp~21=(_ bv0 32), main_~var_group1~0.base=(_ bv3221227450 32), main_~var_group1~0.offset=(_ bv4294967068 32), main_~var_virtblk_ioctl_5_p1~0=(_ bv0 32), main_~var_virtblk_ioctl_5_p2~0=(_ bv1447184708 32), main_~var_virtblk_ioctl_5_p3~0=(_ bv0 64), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |main_#t~switch394|=true, |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call ldv_check_final_state(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume !(0bv32 == ~ldv_blk_rq~0); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call ldv_error(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] assume !false; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |#t~string108.base|=(_ bv850 32), |#t~string108.offset|=(_ bv0 32), |#t~string289.base|=(_ bv5 32), |#t~string289.offset|=(_ bv0 32), |#t~string292.base|=(_ bv1 32), |#t~string292.offset|=(_ bv0 32), |#t~string306.base|=(_ bv1978 32), |#t~string306.offset|=(_ bv0 32), |#t~string309.base|=(_ bv1982 32), |#t~string309.offset|=(_ bv0 32), |#t~string312.base|=(_ bv2 32), |#t~string312.offset|=(_ bv0 32), |#t~string387.base|=(_ bv3 32), |#t~string387.offset|=(_ bv0 32), |#t~string388.base|=(_ bv134218643 32), |#t~string388.offset|=(_ bv0 32), |#t~string391.base|=(_ bv33554433 32), |#t~string391.offset|=(_ bv0 32), |old(~ldv_blk_rq~0)|=(_ bv0 32), |old(~LDV_IN_INTERRUPT~0)|=(_ bv0 32), |old(~major~0)|=(_ bv0 32), |~#__this_module~0.base|=(_ bv0 32), |~#__this_module~0.offset|=(_ bv0 32), |~#features~0.base|=(_ bv656 32), |~#features~0.offset|=(_ bv0 32), |~#id_table~0.base|=(_ bv131890 32), |~#id_table~0.offset|=(_ bv0 32), |~#virtblk_fops~0.base|=(_ bv395931 32), |~#virtblk_fops~0.offset|=(_ bv0 32), |~#virtio_blk~0.base|=(_ bv1979 32), |~#virtio_blk~0.offset|=(_ bv0 32), ~__mod_virtio_device_table~0.device=(_ bv0 32), ~__mod_virtio_device_table~0.vendor=(_ bv0 32), ~index~0=(_ bv0 32), ~ldv_blk_rq~0=(_ bv1 32), ~LDV_IN_INTERRUPT~0=(_ bv1 32), ~major~0=(_ bv0 32)] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=0bv32, #t~string108.offset=0bv32, #t~string289.base=0bv32, #t~string289.offset=0bv32, #t~string292.base=0bv32, #t~string292.offset=0bv32, #t~string306.base=0bv32, #t~string306.offset=0bv32, #t~string309.base=0bv32, #t~string309.offset=0bv32, #t~string312.base=0bv32, #t~string312.offset=0bv32, #t~string387.base=0bv32, #t~string387.offset=0bv32, #t~string388.base=0bv32, #t~string388.offset=0bv32, #t~string391.base=0bv32, #t~string391.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(#t~string108.base)=0bv32, old(#t~string108.offset)=0bv32, old(#t~string289.base)=0bv32, old(#t~string289.offset)=0bv32, old(#t~string292.base)=0bv32, old(#t~string292.offset)=0bv32, old(#t~string306.base)=0bv32, old(#t~string306.offset)=0bv32, old(#t~string309.base)=0bv32, old(#t~string309.offset)=0bv32, old(#t~string312.base)=0bv32, old(#t~string312.offset)=0bv32, old(#t~string387.base)=0bv32, old(#t~string387.offset)=0bv32, old(#t~string388.base)=0bv32, old(#t~string388.offset)=0bv32, old(#t~string391.base)=0bv32, old(#t~string391.offset)=0bv32, old(~#features~0.base)=0bv32, old(~#features~0.offset)=0bv32, old(~#id_table~0.base)=0bv32, old(~#id_table~0.offset)=0bv32, old(~#virtblk_fops~0.base)=0bv32, old(~#virtblk_fops~0.offset)=0bv32, old(~#virtio_blk~0.base)=0bv32, old(~#virtio_blk~0.offset)=0bv32, old(~__mod_virtio_device_table~0.device)=0bv32, old(~__mod_virtio_device_table~0.vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#features~0.base=0bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=0bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=0bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=0bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L3325] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28bv32); [L4142] call #t~string289.base, #t~string289.offset := #Ultimate.alloc(22bv32); [L4146] call #t~string292.base, #t~string292.offset := #Ultimate.alloc(9bv32); [L4180] call #t~string306.base, #t~string306.offset := #Ultimate.alloc(5bv32); [L4180] call write~init~intINTTYPE1(118bv8, #t~string306.base, #t~string306.offset, 1bv32); [L4180] call write~init~intINTTYPE1(100bv8, #t~string306.base, ~bvadd32(1bv32, #t~string306.offset), 1bv32); [L4180] call write~init~intINTTYPE1(37bv8, #t~string306.base, ~bvadd32(2bv32, #t~string306.offset), 1bv32); [L4180] call write~init~intINTTYPE1(99bv8, #t~string306.base, ~bvadd32(3bv32, #t~string306.offset), 1bv32); [L4180] call write~init~intINTTYPE1(0bv8, #t~string306.base, ~bvadd32(4bv32, #t~string306.offset), 1bv32); [L4183] call #t~string309.base, #t~string309.offset := #Ultimate.alloc(7bv32); [L4183] call write~init~intINTTYPE1(118bv8, #t~string309.base, #t~string309.offset, 1bv32); [L4183] call write~init~intINTTYPE1(100bv8, #t~string309.base, ~bvadd32(1bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(37bv8, #t~string309.base, ~bvadd32(2bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(99bv8, #t~string309.base, ~bvadd32(3bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(37bv8, #t~string309.base, ~bvadd32(4bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(99bv8, #t~string309.base, ~bvadd32(5bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(0bv8, #t~string309.base, ~bvadd32(6bv32, #t~string309.offset), 1bv32); [L4188] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(9bv32); [L4303] call #t~string387.base, #t~string387.offset := #Ultimate.alloc(11bv32); [L4310] call #t~string388.base, #t~string388.offset := #Ultimate.alloc(8bv32); [L4325] call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8bv32); [L3726] ~major~0 := 0bv32; [L3727] ~index~0 := 0bv32; [L4299-L4302] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36bv32); [L4299-L4302] call write~init~intINTTYPE4(0bv32, ~#features~0.base, ~#features~0.offset, 4bv32); [L4299-L4302] call write~init~intINTTYPE4(2bv32, ~#features~0.base, ~bvadd32(4bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(1bv32, ~#features~0.base, ~bvadd32(8bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(4bv32, ~#features~0.base, ~bvadd32(12bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(5bv32, ~#features~0.base, ~bvadd32(16bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(6bv32, ~#features~0.base, ~bvadd32(20bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(7bv32, ~#features~0.base, ~bvadd32(24bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(9bv32, ~#features~0.base, ~bvadd32(28bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(10bv32, ~#features~0.base, ~bvadd32(32bv32, ~#features~0.offset), 4bv32); [L4335] ~LDV_IN_INTERRUPT~0 := 0bv32; [L4496] ~ldv_blk_rq~0 := 0bv32; [L4080-L4081] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(8bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, ~bvadd32(16bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(24bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(32bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(40bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(48bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(56bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(64bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, ~bvadd32(72bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(80bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, ~bvadd32(88bv32, ~#virtblk_fops~0.offset), 8bv32); [L4297-L4298] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16bv32); [L4297-L4298] call write~init~intINTTYPE4(2bv32, ~#id_table~0.base, ~#id_table~0.offset, 4bv32); [L4297-L4298] call write~init~intINTTYPE4(4294967295bv32, ~#id_table~0.base, ~bvadd32(4bv32, ~#id_table~0.offset), 4bv32); [L4297-L4298] call write~init~intINTTYPE4(0bv32, ~#id_table~0.base, ~bvadd32(8bv32, ~#id_table~0.offset), 4bv32); [L4297-L4298] call write~init~intINTTYPE4(0bv32, ~#id_table~0.base, ~bvadd32(12bv32, ~#id_table~0.offset), 4bv32); [L4303-L4304] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141bv32); [L4303-L4304] call write~init~$Pointer$(#t~string387.base, #t~string387.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(8bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, ~bvadd32(16bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(24bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~intINTTYPE1(0bv8, ~#virtio_blk~0.base, ~bvadd32(32bv32, ~#virtio_blk~0.offset), 1bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(33bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(41bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(49bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(57bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(65bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(73bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(81bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(89bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, ~bvadd32(97bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, ~bvadd32(105bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~intINTTYPE4(9bv32, ~#virtio_blk~0.base, ~bvadd32(113bv32, ~#virtio_blk~0.offset), 4bv32); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, ~bvadd32(117bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, ~bvadd32(125bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(133bv32, ~#virtio_blk~0.offset), 8bv32); [L4330] ~__mod_virtio_device_table~0.device := 0bv32; [L4330] ~__mod_virtio_device_table~0.vendor := 0bv32; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(#t~string108.base)=0bv32, old(#t~string108.offset)=0bv32, old(#t~string289.base)=0bv32, old(#t~string289.offset)=0bv32, old(#t~string292.base)=0bv32, old(#t~string292.offset)=0bv32, old(#t~string306.base)=0bv32, old(#t~string306.offset)=0bv32, old(#t~string309.base)=0bv32, old(#t~string309.offset)=0bv32, old(#t~string312.base)=0bv32, old(#t~string312.offset)=0bv32, old(#t~string387.base)=0bv32, old(#t~string387.offset)=0bv32, old(#t~string388.base)=0bv32, old(#t~string388.offset)=0bv32, old(#t~string391.base)=0bv32, old(#t~string391.offset)=0bv32, old(~#features~0.base)=0bv32, old(~#features~0.offset)=0bv32, old(~#id_table~0.base)=0bv32, old(~#id_table~0.offset)=0bv32, old(~#virtblk_fops~0.base)=0bv32, old(~#virtblk_fops~0.offset)=0bv32, old(~#virtio_blk~0.base)=0bv32, old(~#virtio_blk~0.offset)=0bv32, old(~__mod_virtio_device_table~0.device)=0bv32, old(~__mod_virtio_device_table~0.vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(#t~string108.base)=0bv32, old(#t~string108.offset)=0bv32, old(#t~string289.base)=0bv32, old(#t~string289.offset)=0bv32, old(#t~string292.base)=0bv32, old(#t~string292.offset)=0bv32, old(#t~string306.base)=0bv32, old(#t~string306.offset)=0bv32, old(#t~string309.base)=0bv32, old(#t~string309.offset)=0bv32, old(#t~string312.base)=0bv32, old(#t~string312.offset)=0bv32, old(#t~string387.base)=0bv32, old(#t~string387.offset)=0bv32, old(#t~string388.base)=0bv32, old(#t~string388.offset)=0bv32, old(#t~string391.base)=0bv32, old(#t~string391.offset)=0bv32, old(~#features~0.base)=0bv32, old(~#features~0.offset)=0bv32, old(~#id_table~0.base)=0bv32, old(~#id_table~0.offset)=0bv32, old(~#virtblk_fops~0.base)=0bv32, old(~#virtblk_fops~0.offset)=0bv32, old(~#virtio_blk~0.base)=0bv32, old(~#virtio_blk~0.offset)=0bv32, old(~__mod_virtio_device_table~0.device)=0bv32, old(~__mod_virtio_device_table~0.vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] CALL call #t~ret405 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [L4338] havoc ~var_group1~0.base, ~var_group1~0.offset; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0.base, ~var_group2~0.offset; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1bv32; [L4349] call ldv_initialize(); [L4350] call ldv_handler_precall(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] CALL call #t~ret392 := init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4307] havoc ~tmp~20; [L4310] call #t~ret389 := register_blkdev(0bv32, #t~string388.base, #t~string388.offset); [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32] [L4311-L4315] assume !~bvslt32(~major~0, 0bv32); [L4316] call #t~ret390 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~20=0bv32] [L4305-L4319] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~20=0bv32] [L4351] RET call #t~ret392 := init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret392=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4352-L4356] assume !(0bv32 != ~tmp~21); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4375-L4379] assume 0bv32 != ~tmp___1~8; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0bv32 == ~tmp___0~13; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4361] assume #t~switch394; [L4362] call ldv_handler_precall(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4009-L4056] ~bdev.base, ~bdev.offset := #in~bdev.base, #in~bdev.offset; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0.base, ~disk~0.offset; [L4013] havoc ~vblk~3.base, ~vblk~3.offset; [L4014] havoc ~usr_data~0.base, ~usr_data~0.offset; [L4015] call ~#id_str~0.base, ~#id_str~0.offset := #Ultimate.alloc(20bv32); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] call #t~mem264.base, #t~mem264.offset := read~$Pointer$(~bdev.base, ~bvadd32(240bv32, ~bdev.offset), 8bv32); [L4023] ~disk~0.base, ~disk~0.offset := #t~mem264.base, #t~mem264.offset; [L4023] havoc #t~mem264.base, #t~mem264.offset; [L4024] call #t~mem265.base, #t~mem265.offset := read~$Pointer$(~disk~0.base, ~bvadd32(1075bv32, ~disk~0.offset), 8bv32); [L4024] ~vblk~3.base, ~vblk~3.offset := #t~mem265.base, #t~mem265.offset; [L4024] havoc #t~mem265.base, #t~mem265.offset; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4025-L4041] assume 1447184708bv32 == ~cmd; [L4026] ~usr_data~0.base, ~usr_data~0.offset := 0bv32, ~data[32:0]; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L3974-L4008] ~disk.base, ~disk.offset := #in~disk.base, #in~disk.offset; [L3974-L4008] ~id_str.base, ~id_str.offset := #in~id_str.base, #in~id_str.offset; [L3976] havoc ~vblk~2.base, ~vblk~2.offset; [L3977] havoc ~req~1.base, ~req~1.offset; [L3978] havoc ~bio~0.base, ~bio~0.offset; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] call #t~mem249.base, #t~mem249.offset := read~$Pointer$(~disk.base, ~bvadd32(1075bv32, ~disk.offset), 8bv32); [L3986] ~vblk~2.base, ~vblk~2.offset := #t~mem249.base, #t~mem249.offset; [L3986] havoc #t~mem249.base, #t~mem249.offset; [L3987] call #t~mem250.base, #t~mem250.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32); [L3987] call #t~mem251.base, #t~mem251.offset := read~$Pointer$(#t~mem250.base, ~bvadd32(1067bv32, #t~mem250.offset), 8bv32); [L3987] call #t~ret252.base, #t~ret252.offset := bio_map_kern(#t~mem251.base, #t~mem251.offset, ~id_str.base, ~id_str.offset, 20bv32, 208bv32); [L3987] ~bio~0.base, ~bio~0.offset := #t~ret252.base, #t~ret252.offset; [L3987] havoc #t~ret252.base, #t~ret252.offset; [L3987] havoc #t~mem250.base, #t~mem250.offset; [L3987] havoc #t~mem251.base, #t~mem251.offset; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr.base, ~ptr.offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32] [L3510] ensures true; VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret400=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32, ~tmp~24=0bv64] [L3120] ensures true; VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32, ~tmp~24=0bv64] [L3988] RET call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret253=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3989-L3994] assume !(0bv64 != ~tmp___0~9); [L3995] call #t~mem255.base, #t~mem255.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32); [L3995] call #t~mem256.base, #t~mem256.offset := read~$Pointer$(#t~mem255.base, ~bvadd32(1067bv32, #t~mem255.offset), 8bv32); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem255.base=1978bv32, #t~mem255.offset=4294966241bv32, #t~mem256.base=1978bv32, #t~mem256.offset=4294966241bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3995] CALL call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208bv32); VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4415-L4427] ~ldv_func_arg1.base, ~ldv_func_arg1.offset := #in~ldv_func_arg1.base, #in~ldv_func_arg1.offset; [L4415-L4427] ~ldv_func_arg2.base, ~ldv_func_arg2.offset := #in~ldv_func_arg2.base, #in~ldv_func_arg2.offset; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0.base, ~ldv_func_res~0.offset; [L4419] havoc ~tmp~25.base, ~tmp~25.offset; [L4422] call #t~ret401.base, #t~ret401.offset := blk_make_request(~ldv_func_arg1.base, ~ldv_func_arg1.offset, ~ldv_func_arg2.base, ~ldv_func_arg2.offset, ~ldv_func_arg3); [L4422] ~tmp~25.base, ~tmp~25.offset := #t~ret401.base, #t~ret401.offset; [L4422] havoc #t~ret401.base, #t~ret401.offset; [L4423] ~ldv_func_res~0.base, ~ldv_func_res~0.offset := ~tmp~25.base, ~tmp~25.offset; VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~ldv_func_arg1.base=1978bv32, ~ldv_func_arg1.offset=4294966241bv32, ~ldv_func_arg2.base=0bv32, ~ldv_func_arg2.offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0.base=1978bv32, ~ldv_func_res~0.offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25.base=1978bv32, ~tmp~25.offset=4294967244bv32] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4497-L4522] ~res.base, ~res.offset := #in~res.base, #in~res.offset; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res.base=1978bv32, ~res.offset=4294967244bv32] [L4502-L4506] assume 0bv32 == ~ldv_blk_rq~0; VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res.base=1978bv32, ~res.offset=4294967244bv32] [L4507-L4519] assume (16bv32 == ~mask || 208bv32 == ~mask) || 16bv32 == ~mask; [L4508] ~ldv_blk_rq~0 := 1bv32; VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res.base=1978bv32, ~res.offset=4294967244bv32] [L3298] ensures true; VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res.base=1978bv32, ~res.offset=4294967244bv32] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1.base=1978bv32, ~ldv_func_arg1.offset=4294966241bv32, ~ldv_func_arg2.base=0bv32, ~ldv_func_arg2.offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0.base=1978bv32, ~ldv_func_res~0.offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25.base=1978bv32, ~tmp~25.offset=4294967244bv32] [L4425] #res.base, #res.offset := ~ldv_func_res~0.base, ~ldv_func_res~0.offset; VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=1978bv32, #res.offset=4294967244bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1.base=1978bv32, ~ldv_func_arg1.offset=4294966241bv32, ~ldv_func_arg2.base=0bv32, ~ldv_func_arg2.offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0.base=1978bv32, ~ldv_func_res~0.offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25.base=1978bv32, ~tmp~25.offset=4294967244bv32] [L3252-L3253] ensures true; VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=1978bv32, #res.offset=4294967244bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1.base=1978bv32, ~ldv_func_arg1.offset=4294966241bv32, ~ldv_func_arg2.base=0bv32, ~ldv_func_arg2.offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0.base=1978bv32, ~ldv_func_res~0.offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25.base=1978bv32, ~tmp~25.offset=4294967244bv32] [L3995] RET call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208bv32); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem255.base=1978bv32, #t~mem255.offset=4294966241bv32, #t~mem256.base=1978bv32, #t~mem256.offset=4294966241bv32, #t~ret257.base=1978bv32, #t~ret257.offset=4294967244bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3995] ~req~1.base, ~req~1.offset := #t~ret257.base, #t~ret257.offset; [L3995] havoc #t~ret257.base, #t~ret257.offset; [L3995] havoc #t~mem255.base, #t~mem255.offset; [L3995] havoc #t~mem256.base, #t~mem256.offset; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3996] CALL call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr.base, ~ptr.offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32] [L3510] ensures true; VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret400=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32, ~tmp~24=0bv64] [L3120] ensures true; VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32, ~tmp~24=0bv64] [L3996] RET call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret258=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3997-L4003] assume !(0bv64 != ~tmp___2~1); [L4004] call write~intINTTYPE4(7bv32, ~req~1.base, ~bvadd32(64bv32, ~req~1.offset), 4bv32); [L4005] call #t~mem260.base, #t~mem260.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32); [L4005] call #t~mem261.base, #t~mem261.offset := read~$Pointer$(#t~mem260.base, ~bvadd32(1067bv32, #t~mem260.offset), 8bv32); [L4005] call #t~mem262.base, #t~mem262.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32); [L4005] call #t~ret263 := blk_execute_rq(#t~mem261.base, #t~mem261.offset, #t~mem262.base, #t~mem262.offset, ~req~1.base, ~req~1.offset, 0bv32); [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260.base, #t~mem260.offset; [L4005] havoc #t~mem262.base, #t~mem262.offset; [L4005] havoc #t~mem261.base, #t~mem261.offset; [L4006] #res := ~tmp___3~1; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~tmp___3~1=1bv32, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3974-L4008] ensures true; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~tmp___3~1=1bv32, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret266=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4028-L4037] assume !(0bv32 == ~err~1); VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4038] #res := ~err~1; [L4015] call ULTIMATE.dealloc(~#id_str~0.base, ~#id_str~0.offset); [L4038] havoc ~#id_str~0.base, ~#id_str~0.offset; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4009-L4056] ensures true; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret395=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4363] havoc #t~ret395; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4375-L4379] assume !(0bv32 != ~tmp___1~8); [L4381] call ldv_handler_precall(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4382] CALL call fini(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4325] call unregister_blkdev(~major~0, #t~string391.base, #t~string391.offset); [L4326] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4320-L4329] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4382] RET call fini(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4384] CALL call ldv_check_final_state(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4542-L4546] assume !(0bv32 == ~ldv_blk_rq~0); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4545] CALL call ldv_error(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4433] assert false; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=0bv32, #t~string108.offset=0bv32, #t~string289.base=0bv32, #t~string289.offset=0bv32, #t~string292.base=0bv32, #t~string292.offset=0bv32, #t~string306.base=0bv32, #t~string306.offset=0bv32, #t~string309.base=0bv32, #t~string309.offset=0bv32, #t~string312.base=0bv32, #t~string312.offset=0bv32, #t~string387.base=0bv32, #t~string387.offset=0bv32, #t~string388.base=0bv32, #t~string388.offset=0bv32, #t~string391.base=0bv32, #t~string391.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(#t~string108.base)=0bv32, old(#t~string108.offset)=0bv32, old(#t~string289.base)=0bv32, old(#t~string289.offset)=0bv32, old(#t~string292.base)=0bv32, old(#t~string292.offset)=0bv32, old(#t~string306.base)=0bv32, old(#t~string306.offset)=0bv32, old(#t~string309.base)=0bv32, old(#t~string309.offset)=0bv32, old(#t~string312.base)=0bv32, old(#t~string312.offset)=0bv32, old(#t~string387.base)=0bv32, old(#t~string387.offset)=0bv32, old(#t~string388.base)=0bv32, old(#t~string388.offset)=0bv32, old(#t~string391.base)=0bv32, old(#t~string391.offset)=0bv32, old(~#features~0.base)=0bv32, old(~#features~0.offset)=0bv32, old(~#id_table~0.base)=0bv32, old(~#id_table~0.offset)=0bv32, old(~#virtblk_fops~0.base)=0bv32, old(~#virtblk_fops~0.offset)=0bv32, old(~#virtio_blk~0.base)=0bv32, old(~#virtio_blk~0.offset)=0bv32, old(~__mod_virtio_device_table~0.device)=0bv32, old(~__mod_virtio_device_table~0.vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#features~0.base=0bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=0bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=0bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=0bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L3325] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28bv32); [L4142] call #t~string289.base, #t~string289.offset := #Ultimate.alloc(22bv32); [L4146] call #t~string292.base, #t~string292.offset := #Ultimate.alloc(9bv32); [L4180] call #t~string306.base, #t~string306.offset := #Ultimate.alloc(5bv32); [L4180] call write~init~intINTTYPE1(118bv8, #t~string306.base, #t~string306.offset, 1bv32); [L4180] call write~init~intINTTYPE1(100bv8, #t~string306.base, ~bvadd32(1bv32, #t~string306.offset), 1bv32); [L4180] call write~init~intINTTYPE1(37bv8, #t~string306.base, ~bvadd32(2bv32, #t~string306.offset), 1bv32); [L4180] call write~init~intINTTYPE1(99bv8, #t~string306.base, ~bvadd32(3bv32, #t~string306.offset), 1bv32); [L4180] call write~init~intINTTYPE1(0bv8, #t~string306.base, ~bvadd32(4bv32, #t~string306.offset), 1bv32); [L4183] call #t~string309.base, #t~string309.offset := #Ultimate.alloc(7bv32); [L4183] call write~init~intINTTYPE1(118bv8, #t~string309.base, #t~string309.offset, 1bv32); [L4183] call write~init~intINTTYPE1(100bv8, #t~string309.base, ~bvadd32(1bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(37bv8, #t~string309.base, ~bvadd32(2bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(99bv8, #t~string309.base, ~bvadd32(3bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(37bv8, #t~string309.base, ~bvadd32(4bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(99bv8, #t~string309.base, ~bvadd32(5bv32, #t~string309.offset), 1bv32); [L4183] call write~init~intINTTYPE1(0bv8, #t~string309.base, ~bvadd32(6bv32, #t~string309.offset), 1bv32); [L4188] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(9bv32); [L4303] call #t~string387.base, #t~string387.offset := #Ultimate.alloc(11bv32); [L4310] call #t~string388.base, #t~string388.offset := #Ultimate.alloc(8bv32); [L4325] call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8bv32); [L3726] ~major~0 := 0bv32; [L3727] ~index~0 := 0bv32; [L4299-L4302] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36bv32); [L4299-L4302] call write~init~intINTTYPE4(0bv32, ~#features~0.base, ~#features~0.offset, 4bv32); [L4299-L4302] call write~init~intINTTYPE4(2bv32, ~#features~0.base, ~bvadd32(4bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(1bv32, ~#features~0.base, ~bvadd32(8bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(4bv32, ~#features~0.base, ~bvadd32(12bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(5bv32, ~#features~0.base, ~bvadd32(16bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(6bv32, ~#features~0.base, ~bvadd32(20bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(7bv32, ~#features~0.base, ~bvadd32(24bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(9bv32, ~#features~0.base, ~bvadd32(28bv32, ~#features~0.offset), 4bv32); [L4299-L4302] call write~init~intINTTYPE4(10bv32, ~#features~0.base, ~bvadd32(32bv32, ~#features~0.offset), 4bv32); [L4335] ~LDV_IN_INTERRUPT~0 := 0bv32; [L4496] ~ldv_blk_rq~0 := 0bv32; [L4080-L4081] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(8bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, ~bvadd32(16bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(24bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(32bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(40bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(48bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(56bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(64bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, ~bvadd32(72bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(0bv32, 0bv32, ~#virtblk_fops~0.base, ~bvadd32(80bv32, ~#virtblk_fops~0.offset), 8bv32); [L4080-L4081] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, ~bvadd32(88bv32, ~#virtblk_fops~0.offset), 8bv32); [L4297-L4298] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16bv32); [L4297-L4298] call write~init~intINTTYPE4(2bv32, ~#id_table~0.base, ~#id_table~0.offset, 4bv32); [L4297-L4298] call write~init~intINTTYPE4(4294967295bv32, ~#id_table~0.base, ~bvadd32(4bv32, ~#id_table~0.offset), 4bv32); [L4297-L4298] call write~init~intINTTYPE4(0bv32, ~#id_table~0.base, ~bvadd32(8bv32, ~#id_table~0.offset), 4bv32); [L4297-L4298] call write~init~intINTTYPE4(0bv32, ~#id_table~0.base, ~bvadd32(12bv32, ~#id_table~0.offset), 4bv32); [L4303-L4304] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141bv32); [L4303-L4304] call write~init~$Pointer$(#t~string387.base, #t~string387.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(8bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, ~bvadd32(16bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(24bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~intINTTYPE1(0bv8, ~#virtio_blk~0.base, ~bvadd32(32bv32, ~#virtio_blk~0.offset), 1bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(33bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(41bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(49bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(57bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(65bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(73bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(81bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(89bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, ~bvadd32(97bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, ~bvadd32(105bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~intINTTYPE4(9bv32, ~#virtio_blk~0.base, ~bvadd32(113bv32, ~#virtio_blk~0.offset), 4bv32); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, ~bvadd32(117bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, ~bvadd32(125bv32, ~#virtio_blk~0.offset), 8bv32); [L4303-L4304] call write~init~$Pointer$(0bv32, 0bv32, ~#virtio_blk~0.base, ~bvadd32(133bv32, ~#virtio_blk~0.offset), 8bv32); [L4330] ~__mod_virtio_device_table~0.device := 0bv32; [L4330] ~__mod_virtio_device_table~0.vendor := 0bv32; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(#t~string108.base)=0bv32, old(#t~string108.offset)=0bv32, old(#t~string289.base)=0bv32, old(#t~string289.offset)=0bv32, old(#t~string292.base)=0bv32, old(#t~string292.offset)=0bv32, old(#t~string306.base)=0bv32, old(#t~string306.offset)=0bv32, old(#t~string309.base)=0bv32, old(#t~string309.offset)=0bv32, old(#t~string312.base)=0bv32, old(#t~string312.offset)=0bv32, old(#t~string387.base)=0bv32, old(#t~string387.offset)=0bv32, old(#t~string388.base)=0bv32, old(#t~string388.offset)=0bv32, old(#t~string391.base)=0bv32, old(#t~string391.offset)=0bv32, old(~#features~0.base)=0bv32, old(~#features~0.offset)=0bv32, old(~#id_table~0.base)=0bv32, old(~#id_table~0.offset)=0bv32, old(~#virtblk_fops~0.base)=0bv32, old(~#virtblk_fops~0.offset)=0bv32, old(~#virtio_blk~0.base)=0bv32, old(~#virtio_blk~0.offset)=0bv32, old(~__mod_virtio_device_table~0.device)=0bv32, old(~__mod_virtio_device_table~0.vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(#t~string108.base)=0bv32, old(#t~string108.offset)=0bv32, old(#t~string289.base)=0bv32, old(#t~string289.offset)=0bv32, old(#t~string292.base)=0bv32, old(#t~string292.offset)=0bv32, old(#t~string306.base)=0bv32, old(#t~string306.offset)=0bv32, old(#t~string309.base)=0bv32, old(#t~string309.offset)=0bv32, old(#t~string312.base)=0bv32, old(#t~string312.offset)=0bv32, old(#t~string387.base)=0bv32, old(#t~string387.offset)=0bv32, old(#t~string388.base)=0bv32, old(#t~string388.offset)=0bv32, old(#t~string391.base)=0bv32, old(#t~string391.offset)=0bv32, old(~#features~0.base)=0bv32, old(~#features~0.offset)=0bv32, old(~#id_table~0.base)=0bv32, old(~#id_table~0.offset)=0bv32, old(~#virtblk_fops~0.base)=0bv32, old(~#virtblk_fops~0.offset)=0bv32, old(~#virtio_blk~0.base)=0bv32, old(~#virtio_blk~0.offset)=0bv32, old(~__mod_virtio_device_table~0.device)=0bv32, old(~__mod_virtio_device_table~0.vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] CALL call #t~ret405 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [L4338] havoc ~var_group1~0.base, ~var_group1~0.offset; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0.base, ~var_group2~0.offset; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1bv32; [L4349] call ldv_initialize(); [L4350] call ldv_handler_precall(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] CALL call #t~ret392 := init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4307] havoc ~tmp~20; [L4310] call #t~ret389 := register_blkdev(0bv32, #t~string388.base, #t~string388.offset); [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32] [L4311-L4315] assume !~bvslt32(~major~0, 0bv32); [L4316] call #t~ret390 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~20=0bv32] [L4305-L4319] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~20=0bv32] [L4351] RET call #t~ret392 := init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret392=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4352-L4356] assume !(0bv32 != ~tmp~21); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4375-L4379] assume 0bv32 != ~tmp___1~8; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0bv32 == ~tmp___0~13; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4361] assume #t~switch394; [L4362] call ldv_handler_precall(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4009-L4056] ~bdev.base, ~bdev.offset := #in~bdev.base, #in~bdev.offset; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0.base, ~disk~0.offset; [L4013] havoc ~vblk~3.base, ~vblk~3.offset; [L4014] havoc ~usr_data~0.base, ~usr_data~0.offset; [L4015] call ~#id_str~0.base, ~#id_str~0.offset := #Ultimate.alloc(20bv32); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] call #t~mem264.base, #t~mem264.offset := read~$Pointer$(~bdev.base, ~bvadd32(240bv32, ~bdev.offset), 8bv32); [L4023] ~disk~0.base, ~disk~0.offset := #t~mem264.base, #t~mem264.offset; [L4023] havoc #t~mem264.base, #t~mem264.offset; [L4024] call #t~mem265.base, #t~mem265.offset := read~$Pointer$(~disk~0.base, ~bvadd32(1075bv32, ~disk~0.offset), 8bv32); [L4024] ~vblk~3.base, ~vblk~3.offset := #t~mem265.base, #t~mem265.offset; [L4024] havoc #t~mem265.base, #t~mem265.offset; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4025-L4041] assume 1447184708bv32 == ~cmd; [L4026] ~usr_data~0.base, ~usr_data~0.offset := 0bv32, ~data[32:0]; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L3974-L4008] ~disk.base, ~disk.offset := #in~disk.base, #in~disk.offset; [L3974-L4008] ~id_str.base, ~id_str.offset := #in~id_str.base, #in~id_str.offset; [L3976] havoc ~vblk~2.base, ~vblk~2.offset; [L3977] havoc ~req~1.base, ~req~1.offset; [L3978] havoc ~bio~0.base, ~bio~0.offset; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] call #t~mem249.base, #t~mem249.offset := read~$Pointer$(~disk.base, ~bvadd32(1075bv32, ~disk.offset), 8bv32); [L3986] ~vblk~2.base, ~vblk~2.offset := #t~mem249.base, #t~mem249.offset; [L3986] havoc #t~mem249.base, #t~mem249.offset; [L3987] call #t~mem250.base, #t~mem250.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32); [L3987] call #t~mem251.base, #t~mem251.offset := read~$Pointer$(#t~mem250.base, ~bvadd32(1067bv32, #t~mem250.offset), 8bv32); [L3987] call #t~ret252.base, #t~ret252.offset := bio_map_kern(#t~mem251.base, #t~mem251.offset, ~id_str.base, ~id_str.offset, 20bv32, 208bv32); [L3987] ~bio~0.base, ~bio~0.offset := #t~ret252.base, #t~ret252.offset; [L3987] havoc #t~ret252.base, #t~ret252.offset; [L3987] havoc #t~mem250.base, #t~mem250.offset; [L3987] havoc #t~mem251.base, #t~mem251.offset; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr.base, ~ptr.offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32] [L3510] ensures true; VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret400=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32, ~tmp~24=0bv64] [L3120] ensures true; VAL [#in~ptr.base=0bv32, #in~ptr.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=0bv32, ~ptr.offset=0bv32, ~tmp~24=0bv64] [L3988] RET call #t~ret253 := IS_ERR(~bio~0.base, ~bio~0.offset); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret253=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3989-L3994] assume !(0bv64 != ~tmp___0~9); [L3995] call #t~mem255.base, #t~mem255.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32); [L3995] call #t~mem256.base, #t~mem256.offset := read~$Pointer$(#t~mem255.base, ~bvadd32(1067bv32, #t~mem255.offset), 8bv32); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem255.base=1978bv32, #t~mem255.offset=4294966241bv32, #t~mem256.base=1978bv32, #t~mem256.offset=4294966241bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3995] CALL call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208bv32); VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4415-L4427] ~ldv_func_arg1.base, ~ldv_func_arg1.offset := #in~ldv_func_arg1.base, #in~ldv_func_arg1.offset; [L4415-L4427] ~ldv_func_arg2.base, ~ldv_func_arg2.offset := #in~ldv_func_arg2.base, #in~ldv_func_arg2.offset; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0.base, ~ldv_func_res~0.offset; [L4419] havoc ~tmp~25.base, ~tmp~25.offset; [L4422] call #t~ret401.base, #t~ret401.offset := blk_make_request(~ldv_func_arg1.base, ~ldv_func_arg1.offset, ~ldv_func_arg2.base, ~ldv_func_arg2.offset, ~ldv_func_arg3); [L4422] ~tmp~25.base, ~tmp~25.offset := #t~ret401.base, #t~ret401.offset; [L4422] havoc #t~ret401.base, #t~ret401.offset; [L4423] ~ldv_func_res~0.base, ~ldv_func_res~0.offset := ~tmp~25.base, ~tmp~25.offset; VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~ldv_func_arg1.base=1978bv32, ~ldv_func_arg1.offset=4294966241bv32, ~ldv_func_arg2.base=0bv32, ~ldv_func_arg2.offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0.base=1978bv32, ~ldv_func_res~0.offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25.base=1978bv32, ~tmp~25.offset=4294967244bv32] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4497-L4522] ~res.base, ~res.offset := #in~res.base, #in~res.offset; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res.base=1978bv32, ~res.offset=4294967244bv32] [L4502-L4506] assume 0bv32 == ~ldv_blk_rq~0; VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res.base=1978bv32, ~res.offset=4294967244bv32] [L4507-L4519] assume (16bv32 == ~mask || 208bv32 == ~mask) || 16bv32 == ~mask; [L4508] ~ldv_blk_rq~0 := 1bv32; VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res.base=1978bv32, ~res.offset=4294967244bv32] [L3298] ensures true; VAL [#in~mask=208bv32, #in~res.base=1978bv32, #in~res.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res.base=1978bv32, ~res.offset=4294967244bv32] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0.base, ~ldv_func_res~0.offset, ~ldv_func_arg3); VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1.base=1978bv32, ~ldv_func_arg1.offset=4294966241bv32, ~ldv_func_arg2.base=0bv32, ~ldv_func_arg2.offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0.base=1978bv32, ~ldv_func_res~0.offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25.base=1978bv32, ~tmp~25.offset=4294967244bv32] [L4425] #res.base, #res.offset := ~ldv_func_res~0.base, ~ldv_func_res~0.offset; VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=1978bv32, #res.offset=4294967244bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1.base=1978bv32, ~ldv_func_arg1.offset=4294966241bv32, ~ldv_func_arg2.base=0bv32, ~ldv_func_arg2.offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0.base=1978bv32, ~ldv_func_res~0.offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25.base=1978bv32, ~tmp~25.offset=4294967244bv32] [L3252-L3253] ensures true; VAL [#in~ldv_func_arg1.base=1978bv32, #in~ldv_func_arg1.offset=4294966241bv32, #in~ldv_func_arg2.base=0bv32, #in~ldv_func_arg2.offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res.base=1978bv32, #res.offset=4294967244bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1.base=1978bv32, ~ldv_func_arg1.offset=4294966241bv32, ~ldv_func_arg2.base=0bv32, ~ldv_func_arg2.offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0.base=1978bv32, ~ldv_func_res~0.offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25.base=1978bv32, ~tmp~25.offset=4294967244bv32] [L3995] RET call #t~ret257.base, #t~ret257.offset := ldv_blk_make_request_5(#t~mem256.base, #t~mem256.offset, ~bio~0.base, ~bio~0.offset, 208bv32); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem255.base=1978bv32, #t~mem255.offset=4294966241bv32, #t~mem256.base=1978bv32, #t~mem256.offset=4294966241bv32, #t~ret257.base=1978bv32, #t~ret257.offset=4294967244bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3995] ~req~1.base, ~req~1.offset := #t~ret257.base, #t~ret257.offset; [L3995] havoc #t~ret257.base, #t~ret257.offset; [L3995] havoc #t~mem255.base, #t~mem255.offset; [L3995] havoc #t~mem256.base, #t~mem256.offset; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3996] CALL call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr.base, ~ptr.offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32] [L3510] ensures true; VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret400=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32, ~tmp~24=0bv64] [L3120] ensures true; VAL [#in~ptr.base=1978bv32, #in~ptr.offset=4294967244bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr.base=1978bv32, ~ptr.offset=4294967244bv32, ~tmp~24=0bv64] [L3996] RET call #t~ret258 := IS_ERR(~req~1.base, ~req~1.offset); VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret258=0bv64, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3997-L4003] assume !(0bv64 != ~tmp___2~1); [L4004] call write~intINTTYPE4(7bv32, ~req~1.base, ~bvadd32(64bv32, ~req~1.offset), 4bv32); [L4005] call #t~mem260.base, #t~mem260.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32); [L4005] call #t~mem261.base, #t~mem261.offset := read~$Pointer$(#t~mem260.base, ~bvadd32(1067bv32, #t~mem260.offset), 8bv32); [L4005] call #t~mem262.base, #t~mem262.offset := read~$Pointer$(~vblk~2.base, ~bvadd32(72bv32, ~vblk~2.offset), 8bv32); [L4005] call #t~ret263 := blk_execute_rq(#t~mem261.base, #t~mem261.offset, #t~mem262.base, #t~mem262.offset, ~req~1.base, ~req~1.offset, 0bv32); [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260.base, #t~mem260.offset; [L4005] havoc #t~mem262.base, #t~mem262.offset; [L4005] havoc #t~mem261.base, #t~mem261.offset; [L4006] #res := ~tmp___3~1; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~tmp___3~1=1bv32, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L3974-L4008] ensures true; VAL [#in~disk.base=2147485626bv32, #in~disk.offset=4294966233bv32, #in~id_str.base=402653395bv32, #in~id_str.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bio~0.base=0bv32, ~bio~0.offset=0bv32, ~disk.base=2147485626bv32, ~disk.offset=4294966233bv32, ~id_str.base=402653395bv32, ~id_str.offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1.base=1978bv32, ~req~1.offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~tmp___3~1=1bv32, ~vblk~2.base=1978bv32, ~vblk~2.offset=4294967236bv32] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0.base, ~disk~0.offset, ~#id_str~0.base, ~#id_str~0.offset); VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~ret266=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4028-L4037] assume !(0bv32 == ~err~1); VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_str~0.base=402653395bv32, ~#id_str~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4038] #res := ~err~1; [L4015] call ULTIMATE.dealloc(~#id_str~0.base, ~#id_str~0.offset); [L4038] havoc ~#id_str~0.base, ~#id_str~0.offset; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4009-L4056] ensures true; VAL [#in~bdev.base=3221227450bv32, #in~bdev.offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #res=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~bdev.base=3221227450bv32, ~bdev.offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0.base=2147485626bv32, ~disk~0.offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0.base=0bv32, ~usr_data~0.offset=0bv32, ~vblk~3.base=1978bv32, ~vblk~3.offset=4294967236bv32] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0.base, ~var_group1~0.offset, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~ret395=1bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4363] havoc #t~ret395; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4375-L4379] assume !(0bv32 != ~tmp___1~8); [L4381] call ldv_handler_precall(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4382] CALL call fini(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4325] call unregister_blkdev(~major~0, #t~string391.base, #t~string391.offset); [L4326] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4320-L4329] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4382] RET call fini(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0.base=3221227450bv32, ~var_group1~0.offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4384] CALL call ldv_check_final_state(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4542-L4546] assume !(0bv32 == ~ldv_blk_rq~0); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4545] CALL call ldv_error(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4433] assert false; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~string108.base=850bv32, #t~string108.offset=0bv32, #t~string289.base=5bv32, #t~string289.offset=0bv32, #t~string292.base=1bv32, #t~string292.offset=0bv32, #t~string306.base=1978bv32, #t~string306.offset=0bv32, #t~string309.base=1982bv32, #t~string309.offset=0bv32, #t~string312.base=2bv32, #t~string312.offset=0bv32, #t~string387.base=3bv32, #t~string387.offset=0bv32, #t~string388.base=134218643bv32, #t~string388.offset=0bv32, #t~string391.base=33554433bv32, #t~string391.offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0.base=0bv32, ~#__this_module~0.offset=0bv32, ~#features~0.base=656bv32, ~#features~0.offset=0bv32, ~#id_table~0.base=131890bv32, ~#id_table~0.offset=0bv32, ~#virtblk_fops~0.base=395931bv32, ~#virtblk_fops~0.offset=0bv32, ~#virtio_blk~0.base=1979bv32, ~#virtio_blk~0.offset=0bv32, ~__mod_virtio_device_table~0.device=0bv32, ~__mod_virtio_device_table~0.vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=0bv32, #t~string108!offset=0bv32, #t~string289!base=0bv32, #t~string289!offset=0bv32, #t~string292!base=0bv32, #t~string292!offset=0bv32, #t~string306!base=0bv32, #t~string306!offset=0bv32, #t~string309!base=0bv32, #t~string309!offset=0bv32, #t~string312!base=0bv32, #t~string312!offset=0bv32, #t~string387!base=0bv32, #t~string387!offset=0bv32, #t~string388!base=0bv32, #t~string388!offset=0bv32, #t~string391!base=0bv32, #t~string391!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string108!base)=0bv32, old(#t~string108!offset)=0bv32, old(#t~string289!base)=0bv32, old(#t~string289!offset)=0bv32, old(#t~string292!base)=0bv32, old(#t~string292!offset)=0bv32, old(#t~string306!base)=0bv32, old(#t~string306!offset)=0bv32, old(#t~string309!base)=0bv32, old(#t~string309!offset)=0bv32, old(#t~string312!base)=0bv32, old(#t~string312!offset)=0bv32, old(#t~string387!base)=0bv32, old(#t~string387!offset)=0bv32, old(#t~string388!base)=0bv32, old(#t~string388!offset)=0bv32, old(#t~string391!base)=0bv32, old(#t~string391!offset)=0bv32, old(~#features~0!base)=0bv32, old(~#features~0!offset)=0bv32, old(~#id_table~0!base)=0bv32, old(~#id_table~0!offset)=0bv32, old(~#virtblk_fops~0!base)=0bv32, old(~#virtblk_fops~0!offset)=0bv32, old(~#virtio_blk~0!base)=0bv32, old(~#virtio_blk~0!offset)=0bv32, old(~__mod_virtio_device_table~0!device)=0bv32, old(~__mod_virtio_device_table~0!vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#features~0!base=0bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=0bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=0bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=0bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28bv32); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22bv32); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9bv32); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5bv32); [L4180] FCALL call write~init~intINTTYPE1(118bv8, { base: #t~string306!base, offset: #t~string306!offset }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(100bv8, { base: #t~string306!base, offset: ~bvadd32(1bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string306!base, offset: ~bvadd32(2bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string306!base, offset: ~bvadd32(3bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string306!base, offset: ~bvadd32(4bv32, #t~string306!offset) }, 1bv32); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7bv32); [L4183] FCALL call write~init~intINTTYPE1(118bv8, { base: #t~string309!base, offset: #t~string309!offset }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(100bv8, { base: #t~string309!base, offset: ~bvadd32(1bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string309!base, offset: ~bvadd32(2bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string309!base, offset: ~bvadd32(3bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string309!base, offset: ~bvadd32(4bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string309!base, offset: ~bvadd32(5bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string309!base, offset: ~bvadd32(6bv32, #t~string309!offset) }, 1bv32); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9bv32); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11bv32); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8bv32); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8bv32); [L3726] ~major~0 := 0bv32; [L3727] ~index~0 := 0bv32; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#features~0!base, offset: ~#features~0!offset }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#features~0!base, offset: ~bvadd32(4bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#features~0!base, offset: ~bvadd32(8bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(4bv32, { base: ~#features~0!base, offset: ~bvadd32(12bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(5bv32, { base: ~#features~0!base, offset: ~bvadd32(16bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(6bv32, { base: ~#features~0!base, offset: ~bvadd32(20bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(7bv32, { base: ~#features~0!base, offset: ~bvadd32(24bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(9bv32, { base: ~#features~0!base, offset: ~bvadd32(28bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(10bv32, { base: ~#features~0!base, offset: ~bvadd32(32bv32, ~#features~0!offset) }, 4bv32); [L4335] ~LDV_IN_INTERRUPT~0 := 0bv32; [L4496] ~ldv_blk_rq~0 := 0bv32; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(8bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(16bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(24bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(32bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(40bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(48bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(56bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(64bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(72bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(80bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(88bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(4294967295bv32, { base: ~#id_table~0!base, offset: ~bvadd32(4bv32, ~#id_table~0!offset) }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#id_table~0!base, offset: ~bvadd32(8bv32, ~#id_table~0!offset) }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#id_table~0!base, offset: ~bvadd32(12bv32, ~#id_table~0!offset) }, 4bv32); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(8bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(16bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(24bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~intINTTYPE1(0bv8, { base: ~#virtio_blk~0!base, offset: ~bvadd32(32bv32, ~#virtio_blk~0!offset) }, 1bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(33bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(41bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(49bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(57bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(65bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(73bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(81bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(89bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(97bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(105bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~intINTTYPE4(9bv32, { base: ~#virtio_blk~0!base, offset: ~bvadd32(113bv32, ~#virtio_blk~0!offset) }, 4bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: ~bvadd32(117bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: ~bvadd32(125bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(133bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4330] ~__mod_virtio_device_table~0!device := 0bv32; [L4330] ~__mod_virtio_device_table~0!vendor := 0bv32; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string108!base)=0bv32, old(#t~string108!offset)=0bv32, old(#t~string289!base)=0bv32, old(#t~string289!offset)=0bv32, old(#t~string292!base)=0bv32, old(#t~string292!offset)=0bv32, old(#t~string306!base)=0bv32, old(#t~string306!offset)=0bv32, old(#t~string309!base)=0bv32, old(#t~string309!offset)=0bv32, old(#t~string312!base)=0bv32, old(#t~string312!offset)=0bv32, old(#t~string387!base)=0bv32, old(#t~string387!offset)=0bv32, old(#t~string388!base)=0bv32, old(#t~string388!offset)=0bv32, old(#t~string391!base)=0bv32, old(#t~string391!offset)=0bv32, old(~#features~0!base)=0bv32, old(~#features~0!offset)=0bv32, old(~#id_table~0!base)=0bv32, old(~#id_table~0!offset)=0bv32, old(~#virtblk_fops~0!base)=0bv32, old(~#virtblk_fops~0!offset)=0bv32, old(~#virtio_blk~0!base)=0bv32, old(~#virtio_blk~0!offset)=0bv32, old(~__mod_virtio_device_table~0!device)=0bv32, old(~__mod_virtio_device_table~0!vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] CALL call #t~ret405 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1bv32; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] CALL call #t~ret392 := init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0bv32, #t~string388); [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32] [L4311] COND FALSE !(~bvslt32(~major~0, 0bv32)) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~20=0bv32] [L4351] RET call #t~ret392 := init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret392=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4352] COND FALSE !(0bv32 != ~tmp~21) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4375] COND TRUE 0bv32 != ~tmp___1~8 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0bv32 == ~tmp___0~13; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20bv32); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: ~bvadd32(240bv32, ~bdev!offset) }, 8bv32); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: ~bvadd32(1075bv32, ~disk~0!offset) }, 8bv32); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4025] COND TRUE 1447184708bv32 == ~cmd [L4026] ~usr_data~0 := { base: 0bv32, offset: ~data[32:0] }; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: ~bvadd32(1075bv32, ~disk!offset) }, 8bv32); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: ~bvadd32(1067bv32, #t~mem250!offset) }, 8bv32); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20bv32, 208bv32); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~ret252; [L3987] havoc #t~mem250; [L3987] havoc #t~mem251; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr!base, ~ptr!offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret400=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32, ~tmp~24=0bv64] [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret253=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3989] COND FALSE !(0bv64 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: ~bvadd32(1067bv32, #t~mem255!offset) }, 8bv32); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem255!base=1978bv32, #t~mem255!offset=4294966241bv32, #t~mem256!base=1978bv32, #t~mem256!offset=4294966241bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3995] CALL call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208bv32); VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4502] COND TRUE 0bv32 == ~ldv_blk_rq~0 VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4507] COND TRUE (16bv32 == ~mask || 208bv32 == ~mask) || 16bv32 == ~mask [L4508] ~ldv_blk_rq~0 := 1bv32; VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L4425] #res := ~ldv_func_res~0; VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=1978bv32, #res!offset=4294967244bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L3995] RET call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208bv32); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem255!base=1978bv32, #t~mem255!offset=4294966241bv32, #t~mem256!base=1978bv32, #t~mem256!offset=4294966241bv32, #t~ret257!base=1978bv32, #t~ret257!offset=4294967244bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem255; [L3995] havoc #t~mem256; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr!base, ~ptr!offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret400=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32, ~tmp~24=0bv64] [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret258=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3997] COND FALSE !(0bv64 != ~tmp___2~1) [L4004] FCALL call write~intINTTYPE4(7bv32, { base: ~req~1!base, offset: ~bvadd32(64bv32, ~req~1!offset) }, 4bv32); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: ~bvadd32(1067bv32, #t~mem260!offset) }, 8bv32); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0bv32); [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4005] havoc #t~mem262; [L4005] havoc #t~mem261; [L4006] #res := ~tmp___3~1; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~tmp___3~1=1bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret266=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4028] COND FALSE !(0bv32 == ~err~1) VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret395=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4363] havoc #t~ret395; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4375] COND FALSE !(0bv32 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4382] CALL call fini(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4382] RET call fini(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4384] CALL call ldv_check_final_state(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4542] COND FALSE !(0bv32 == ~ldv_blk_rq~0) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4545] CALL call ldv_error(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4433] assert false; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=0bv32, #t~string108!offset=0bv32, #t~string289!base=0bv32, #t~string289!offset=0bv32, #t~string292!base=0bv32, #t~string292!offset=0bv32, #t~string306!base=0bv32, #t~string306!offset=0bv32, #t~string309!base=0bv32, #t~string309!offset=0bv32, #t~string312!base=0bv32, #t~string312!offset=0bv32, #t~string387!base=0bv32, #t~string387!offset=0bv32, #t~string388!base=0bv32, #t~string388!offset=0bv32, #t~string391!base=0bv32, #t~string391!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string108!base)=0bv32, old(#t~string108!offset)=0bv32, old(#t~string289!base)=0bv32, old(#t~string289!offset)=0bv32, old(#t~string292!base)=0bv32, old(#t~string292!offset)=0bv32, old(#t~string306!base)=0bv32, old(#t~string306!offset)=0bv32, old(#t~string309!base)=0bv32, old(#t~string309!offset)=0bv32, old(#t~string312!base)=0bv32, old(#t~string312!offset)=0bv32, old(#t~string387!base)=0bv32, old(#t~string387!offset)=0bv32, old(#t~string388!base)=0bv32, old(#t~string388!offset)=0bv32, old(#t~string391!base)=0bv32, old(#t~string391!offset)=0bv32, old(~#features~0!base)=0bv32, old(~#features~0!offset)=0bv32, old(~#id_table~0!base)=0bv32, old(~#id_table~0!offset)=0bv32, old(~#virtblk_fops~0!base)=0bv32, old(~#virtblk_fops~0!offset)=0bv32, old(~#virtio_blk~0!base)=0bv32, old(~#virtio_blk~0!offset)=0bv32, old(~__mod_virtio_device_table~0!device)=0bv32, old(~__mod_virtio_device_table~0!vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#features~0!base=0bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=0bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=0bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=0bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28bv32); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22bv32); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9bv32); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5bv32); [L4180] FCALL call write~init~intINTTYPE1(118bv8, { base: #t~string306!base, offset: #t~string306!offset }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(100bv8, { base: #t~string306!base, offset: ~bvadd32(1bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string306!base, offset: ~bvadd32(2bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string306!base, offset: ~bvadd32(3bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string306!base, offset: ~bvadd32(4bv32, #t~string306!offset) }, 1bv32); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7bv32); [L4183] FCALL call write~init~intINTTYPE1(118bv8, { base: #t~string309!base, offset: #t~string309!offset }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(100bv8, { base: #t~string309!base, offset: ~bvadd32(1bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string309!base, offset: ~bvadd32(2bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string309!base, offset: ~bvadd32(3bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string309!base, offset: ~bvadd32(4bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string309!base, offset: ~bvadd32(5bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string309!base, offset: ~bvadd32(6bv32, #t~string309!offset) }, 1bv32); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9bv32); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11bv32); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8bv32); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8bv32); [L3726] ~major~0 := 0bv32; [L3727] ~index~0 := 0bv32; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#features~0!base, offset: ~#features~0!offset }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#features~0!base, offset: ~bvadd32(4bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#features~0!base, offset: ~bvadd32(8bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(4bv32, { base: ~#features~0!base, offset: ~bvadd32(12bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(5bv32, { base: ~#features~0!base, offset: ~bvadd32(16bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(6bv32, { base: ~#features~0!base, offset: ~bvadd32(20bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(7bv32, { base: ~#features~0!base, offset: ~bvadd32(24bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(9bv32, { base: ~#features~0!base, offset: ~bvadd32(28bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(10bv32, { base: ~#features~0!base, offset: ~bvadd32(32bv32, ~#features~0!offset) }, 4bv32); [L4335] ~LDV_IN_INTERRUPT~0 := 0bv32; [L4496] ~ldv_blk_rq~0 := 0bv32; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(8bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(16bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(24bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(32bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(40bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(48bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(56bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(64bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(72bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(80bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(88bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(4294967295bv32, { base: ~#id_table~0!base, offset: ~bvadd32(4bv32, ~#id_table~0!offset) }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#id_table~0!base, offset: ~bvadd32(8bv32, ~#id_table~0!offset) }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#id_table~0!base, offset: ~bvadd32(12bv32, ~#id_table~0!offset) }, 4bv32); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(8bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(16bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(24bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~intINTTYPE1(0bv8, { base: ~#virtio_blk~0!base, offset: ~bvadd32(32bv32, ~#virtio_blk~0!offset) }, 1bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(33bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(41bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(49bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(57bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(65bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(73bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(81bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(89bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(97bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(105bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~intINTTYPE4(9bv32, { base: ~#virtio_blk~0!base, offset: ~bvadd32(113bv32, ~#virtio_blk~0!offset) }, 4bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: ~bvadd32(117bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: ~bvadd32(125bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(133bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4330] ~__mod_virtio_device_table~0!device := 0bv32; [L4330] ~__mod_virtio_device_table~0!vendor := 0bv32; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string108!base)=0bv32, old(#t~string108!offset)=0bv32, old(#t~string289!base)=0bv32, old(#t~string289!offset)=0bv32, old(#t~string292!base)=0bv32, old(#t~string292!offset)=0bv32, old(#t~string306!base)=0bv32, old(#t~string306!offset)=0bv32, old(#t~string309!base)=0bv32, old(#t~string309!offset)=0bv32, old(#t~string312!base)=0bv32, old(#t~string312!offset)=0bv32, old(#t~string387!base)=0bv32, old(#t~string387!offset)=0bv32, old(#t~string388!base)=0bv32, old(#t~string388!offset)=0bv32, old(#t~string391!base)=0bv32, old(#t~string391!offset)=0bv32, old(~#features~0!base)=0bv32, old(~#features~0!offset)=0bv32, old(~#id_table~0!base)=0bv32, old(~#id_table~0!offset)=0bv32, old(~#virtblk_fops~0!base)=0bv32, old(~#virtblk_fops~0!offset)=0bv32, old(~#virtio_blk~0!base)=0bv32, old(~#virtio_blk~0!offset)=0bv32, old(~__mod_virtio_device_table~0!device)=0bv32, old(~__mod_virtio_device_table~0!vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] CALL call #t~ret405 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1bv32; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] CALL call #t~ret392 := init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0bv32, #t~string388); [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32] [L4311] COND FALSE !(~bvslt32(~major~0, 0bv32)) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~20=0bv32] [L4351] RET call #t~ret392 := init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret392=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4352] COND FALSE !(0bv32 != ~tmp~21) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4375] COND TRUE 0bv32 != ~tmp___1~8 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0bv32 == ~tmp___0~13; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20bv32); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: ~bvadd32(240bv32, ~bdev!offset) }, 8bv32); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: ~bvadd32(1075bv32, ~disk~0!offset) }, 8bv32); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4025] COND TRUE 1447184708bv32 == ~cmd [L4026] ~usr_data~0 := { base: 0bv32, offset: ~data[32:0] }; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: ~bvadd32(1075bv32, ~disk!offset) }, 8bv32); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: ~bvadd32(1067bv32, #t~mem250!offset) }, 8bv32); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20bv32, 208bv32); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~ret252; [L3987] havoc #t~mem250; [L3987] havoc #t~mem251; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr!base, ~ptr!offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret400=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32, ~tmp~24=0bv64] [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret253=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3989] COND FALSE !(0bv64 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: ~bvadd32(1067bv32, #t~mem255!offset) }, 8bv32); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem255!base=1978bv32, #t~mem255!offset=4294966241bv32, #t~mem256!base=1978bv32, #t~mem256!offset=4294966241bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3995] CALL call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208bv32); VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4502] COND TRUE 0bv32 == ~ldv_blk_rq~0 VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4507] COND TRUE (16bv32 == ~mask || 208bv32 == ~mask) || 16bv32 == ~mask [L4508] ~ldv_blk_rq~0 := 1bv32; VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L4425] #res := ~ldv_func_res~0; VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=1978bv32, #res!offset=4294967244bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L3995] RET call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208bv32); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem255!base=1978bv32, #t~mem255!offset=4294966241bv32, #t~mem256!base=1978bv32, #t~mem256!offset=4294966241bv32, #t~ret257!base=1978bv32, #t~ret257!offset=4294967244bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem255; [L3995] havoc #t~mem256; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr!base, ~ptr!offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret400=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32, ~tmp~24=0bv64] [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret258=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3997] COND FALSE !(0bv64 != ~tmp___2~1) [L4004] FCALL call write~intINTTYPE4(7bv32, { base: ~req~1!base, offset: ~bvadd32(64bv32, ~req~1!offset) }, 4bv32); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: ~bvadd32(1067bv32, #t~mem260!offset) }, 8bv32); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0bv32); [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4005] havoc #t~mem262; [L4005] havoc #t~mem261; [L4006] #res := ~tmp___3~1; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~tmp___3~1=1bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret266=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4028] COND FALSE !(0bv32 == ~err~1) VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret395=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4363] havoc #t~ret395; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4375] COND FALSE !(0bv32 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4382] CALL call fini(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4382] RET call fini(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4384] CALL call ldv_check_final_state(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4542] COND FALSE !(0bv32 == ~ldv_blk_rq~0) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4545] CALL call ldv_error(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4433] assert false; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=0bv32, #t~string108!offset=0bv32, #t~string289!base=0bv32, #t~string289!offset=0bv32, #t~string292!base=0bv32, #t~string292!offset=0bv32, #t~string306!base=0bv32, #t~string306!offset=0bv32, #t~string309!base=0bv32, #t~string309!offset=0bv32, #t~string312!base=0bv32, #t~string312!offset=0bv32, #t~string387!base=0bv32, #t~string387!offset=0bv32, #t~string388!base=0bv32, #t~string388!offset=0bv32, #t~string391!base=0bv32, #t~string391!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string108!base)=0bv32, old(#t~string108!offset)=0bv32, old(#t~string289!base)=0bv32, old(#t~string289!offset)=0bv32, old(#t~string292!base)=0bv32, old(#t~string292!offset)=0bv32, old(#t~string306!base)=0bv32, old(#t~string306!offset)=0bv32, old(#t~string309!base)=0bv32, old(#t~string309!offset)=0bv32, old(#t~string312!base)=0bv32, old(#t~string312!offset)=0bv32, old(#t~string387!base)=0bv32, old(#t~string387!offset)=0bv32, old(#t~string388!base)=0bv32, old(#t~string388!offset)=0bv32, old(#t~string391!base)=0bv32, old(#t~string391!offset)=0bv32, old(~#features~0!base)=0bv32, old(~#features~0!offset)=0bv32, old(~#id_table~0!base)=0bv32, old(~#id_table~0!offset)=0bv32, old(~#virtblk_fops~0!base)=0bv32, old(~#virtblk_fops~0!offset)=0bv32, old(~#virtio_blk~0!base)=0bv32, old(~#virtio_blk~0!offset)=0bv32, old(~__mod_virtio_device_table~0!device)=0bv32, old(~__mod_virtio_device_table~0!vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#features~0!base=0bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=0bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=0bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=0bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28bv32); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22bv32); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9bv32); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5bv32); [L4180] FCALL call write~init~intINTTYPE1(118bv8, { base: #t~string306!base, offset: #t~string306!offset }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(100bv8, { base: #t~string306!base, offset: ~bvadd32(1bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string306!base, offset: ~bvadd32(2bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string306!base, offset: ~bvadd32(3bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string306!base, offset: ~bvadd32(4bv32, #t~string306!offset) }, 1bv32); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7bv32); [L4183] FCALL call write~init~intINTTYPE1(118bv8, { base: #t~string309!base, offset: #t~string309!offset }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(100bv8, { base: #t~string309!base, offset: ~bvadd32(1bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string309!base, offset: ~bvadd32(2bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string309!base, offset: ~bvadd32(3bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string309!base, offset: ~bvadd32(4bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string309!base, offset: ~bvadd32(5bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string309!base, offset: ~bvadd32(6bv32, #t~string309!offset) }, 1bv32); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9bv32); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11bv32); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8bv32); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8bv32); [L3726] ~major~0 := 0bv32; [L3727] ~index~0 := 0bv32; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#features~0!base, offset: ~#features~0!offset }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#features~0!base, offset: ~bvadd32(4bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#features~0!base, offset: ~bvadd32(8bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(4bv32, { base: ~#features~0!base, offset: ~bvadd32(12bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(5bv32, { base: ~#features~0!base, offset: ~bvadd32(16bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(6bv32, { base: ~#features~0!base, offset: ~bvadd32(20bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(7bv32, { base: ~#features~0!base, offset: ~bvadd32(24bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(9bv32, { base: ~#features~0!base, offset: ~bvadd32(28bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(10bv32, { base: ~#features~0!base, offset: ~bvadd32(32bv32, ~#features~0!offset) }, 4bv32); [L4335] ~LDV_IN_INTERRUPT~0 := 0bv32; [L4496] ~ldv_blk_rq~0 := 0bv32; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(8bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(16bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(24bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(32bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(40bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(48bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(56bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(64bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(72bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(80bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(88bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(4294967295bv32, { base: ~#id_table~0!base, offset: ~bvadd32(4bv32, ~#id_table~0!offset) }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#id_table~0!base, offset: ~bvadd32(8bv32, ~#id_table~0!offset) }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#id_table~0!base, offset: ~bvadd32(12bv32, ~#id_table~0!offset) }, 4bv32); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(8bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(16bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(24bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~intINTTYPE1(0bv8, { base: ~#virtio_blk~0!base, offset: ~bvadd32(32bv32, ~#virtio_blk~0!offset) }, 1bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(33bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(41bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(49bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(57bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(65bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(73bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(81bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(89bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(97bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(105bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~intINTTYPE4(9bv32, { base: ~#virtio_blk~0!base, offset: ~bvadd32(113bv32, ~#virtio_blk~0!offset) }, 4bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: ~bvadd32(117bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: ~bvadd32(125bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(133bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4330] ~__mod_virtio_device_table~0!device := 0bv32; [L4330] ~__mod_virtio_device_table~0!vendor := 0bv32; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string108!base)=0bv32, old(#t~string108!offset)=0bv32, old(#t~string289!base)=0bv32, old(#t~string289!offset)=0bv32, old(#t~string292!base)=0bv32, old(#t~string292!offset)=0bv32, old(#t~string306!base)=0bv32, old(#t~string306!offset)=0bv32, old(#t~string309!base)=0bv32, old(#t~string309!offset)=0bv32, old(#t~string312!base)=0bv32, old(#t~string312!offset)=0bv32, old(#t~string387!base)=0bv32, old(#t~string387!offset)=0bv32, old(#t~string388!base)=0bv32, old(#t~string388!offset)=0bv32, old(#t~string391!base)=0bv32, old(#t~string391!offset)=0bv32, old(~#features~0!base)=0bv32, old(~#features~0!offset)=0bv32, old(~#id_table~0!base)=0bv32, old(~#id_table~0!offset)=0bv32, old(~#virtblk_fops~0!base)=0bv32, old(~#virtblk_fops~0!offset)=0bv32, old(~#virtio_blk~0!base)=0bv32, old(~#virtio_blk~0!offset)=0bv32, old(~__mod_virtio_device_table~0!device)=0bv32, old(~__mod_virtio_device_table~0!vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] CALL call #t~ret405 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1bv32; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] CALL call #t~ret392 := init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0bv32, #t~string388); [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32] [L4311] COND FALSE !(~bvslt32(~major~0, 0bv32)) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~20=0bv32] [L4351] RET call #t~ret392 := init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret392=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4352] COND FALSE !(0bv32 != ~tmp~21) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4375] COND TRUE 0bv32 != ~tmp___1~8 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0bv32 == ~tmp___0~13; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20bv32); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: ~bvadd32(240bv32, ~bdev!offset) }, 8bv32); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: ~bvadd32(1075bv32, ~disk~0!offset) }, 8bv32); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4025] COND TRUE 1447184708bv32 == ~cmd [L4026] ~usr_data~0 := { base: 0bv32, offset: ~data[32:0] }; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: ~bvadd32(1075bv32, ~disk!offset) }, 8bv32); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: ~bvadd32(1067bv32, #t~mem250!offset) }, 8bv32); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20bv32, 208bv32); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~ret252; [L3987] havoc #t~mem250; [L3987] havoc #t~mem251; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr!base, ~ptr!offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret400=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32, ~tmp~24=0bv64] [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret253=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3989] COND FALSE !(0bv64 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: ~bvadd32(1067bv32, #t~mem255!offset) }, 8bv32); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem255!base=1978bv32, #t~mem255!offset=4294966241bv32, #t~mem256!base=1978bv32, #t~mem256!offset=4294966241bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3995] CALL call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208bv32); VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4502] COND TRUE 0bv32 == ~ldv_blk_rq~0 VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4507] COND TRUE (16bv32 == ~mask || 208bv32 == ~mask) || 16bv32 == ~mask [L4508] ~ldv_blk_rq~0 := 1bv32; VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L4425] #res := ~ldv_func_res~0; VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=1978bv32, #res!offset=4294967244bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L3995] RET call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208bv32); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem255!base=1978bv32, #t~mem255!offset=4294966241bv32, #t~mem256!base=1978bv32, #t~mem256!offset=4294966241bv32, #t~ret257!base=1978bv32, #t~ret257!offset=4294967244bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem255; [L3995] havoc #t~mem256; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr!base, ~ptr!offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret400=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32, ~tmp~24=0bv64] [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret258=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3997] COND FALSE !(0bv64 != ~tmp___2~1) [L4004] FCALL call write~intINTTYPE4(7bv32, { base: ~req~1!base, offset: ~bvadd32(64bv32, ~req~1!offset) }, 4bv32); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: ~bvadd32(1067bv32, #t~mem260!offset) }, 8bv32); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0bv32); [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4005] havoc #t~mem262; [L4005] havoc #t~mem261; [L4006] #res := ~tmp___3~1; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~tmp___3~1=1bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret266=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4028] COND FALSE !(0bv32 == ~err~1) VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret395=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4363] havoc #t~ret395; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4375] COND FALSE !(0bv32 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4382] CALL call fini(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4382] RET call fini(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4384] CALL call ldv_check_final_state(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4542] COND FALSE !(0bv32 == ~ldv_blk_rq~0) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4545] CALL call ldv_error(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4433] assert false; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] ----- [2018-11-23 00:24:10,493 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~virtio_driver?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?id_table~*virtio_device_id?feature_table~*UINT?feature_table_size~UINT?probe~*((*virtio_device ) : INT)?remove~*((*virtio_device ) : VOID)?config_changed~*((*virtio_device ) : VOID)# [2018-11-23 00:24:10,495 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,496 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~STRUCT~~virtio_device_id?device~~__u32~0?vendor~~__u32~0## [2018-11-23 00:24:10,496 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,496 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~STRUCT~~virtio_device_id?device~~__u32~0?vendor~~__u32~0## [2018-11-23 00:24:10,497 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~block_device_operations?open~*((*block_device ~fmode_t~0 ) : INT)?release~*((*gendisk ~fmode_t~0 ) : INT)?locked_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?compat_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?direct_access~*((*block_device ~sector_t~0 **VOID *ULONG ) : INT)?media_changed~*((*gendisk ) : INT)?unlock_native_capacity~*((*gendisk ) : VOID)?revalidate_disk~*((*gendisk ) : INT)?getgeo~*((*block_device *hd_geometry ) : INT)?swap_slot_free_notify~*((*block_device ULONG ) : VOID)?owner~*module# [2018-11-23 00:24:10,497 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~UINT# [2018-11-23 00:24:10,497 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,497 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~block_device_operations?open~*((*block_device ~fmode_t~0 ) : INT)?release~*((*gendisk ~fmode_t~0 ) : INT)?locked_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?compat_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?direct_access~*((*block_device ~sector_t~0 **VOID *ULONG ) : INT)?media_changed~*((*gendisk ) : INT)?unlock_native_capacity~*((*gendisk ) : VOID)?revalidate_disk~*((*gendisk ) : INT)?getgeo~*((*block_device *hd_geometry ) : INT)?swap_slot_free_notify~*((*block_device ULONG ) : VOID)?owner~*module# [2018-11-23 00:24:10,498 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~virtio_driver?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?id_table~*virtio_device_id?feature_table~*UINT?feature_table_size~UINT?probe~*((*virtio_device ) : INT)?remove~*((*virtio_device ) : VOID)?config_changed~*((*virtio_device ) : VOID)# [2018-11-23 00:24:10,498 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,498 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~UINT# [2018-11-23 00:24:10,500 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,500 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,501 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,501 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,502 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,502 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,503 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,503 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,503 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,504 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,504 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,505 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,505 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,505 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,506 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,507 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,507 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,507 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,508 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,508 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,509 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,509 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,510 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,510 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,510 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,511 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,511 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,512 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,512 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,513 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,513 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,514 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,514 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,515 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,515 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,516 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,516 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,517 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,517 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,517 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,518 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,518 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,519 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,519 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,520 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,520 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,521 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,521 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,522 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,522 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,523 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,523 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,523 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,524 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,524 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,524 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,525 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,525 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,526 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,526 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,526 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,527 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,527 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,528 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,529 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,529 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,530 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,530 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,531 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,531 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,539 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,539 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,539 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch394 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-23 00:24:10,540 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,540 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,541 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,541 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,541 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch394 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-23 00:24:10,542 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,542 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,542 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,542 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,543 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,543 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,544 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,544 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 00:24:10,550 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 00:24:10,551 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=0bv32, #t~string108!offset=0bv32, #t~string289!base=0bv32, #t~string289!offset=0bv32, #t~string292!base=0bv32, #t~string292!offset=0bv32, #t~string306!base=0bv32, #t~string306!offset=0bv32, #t~string309!base=0bv32, #t~string309!offset=0bv32, #t~string312!base=0bv32, #t~string312!offset=0bv32, #t~string387!base=0bv32, #t~string387!offset=0bv32, #t~string388!base=0bv32, #t~string388!offset=0bv32, #t~string391!base=0bv32, #t~string391!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string108!base)=0bv32, old(#t~string108!offset)=0bv32, old(#t~string289!base)=0bv32, old(#t~string289!offset)=0bv32, old(#t~string292!base)=0bv32, old(#t~string292!offset)=0bv32, old(#t~string306!base)=0bv32, old(#t~string306!offset)=0bv32, old(#t~string309!base)=0bv32, old(#t~string309!offset)=0bv32, old(#t~string312!base)=0bv32, old(#t~string312!offset)=0bv32, old(#t~string387!base)=0bv32, old(#t~string387!offset)=0bv32, old(#t~string388!base)=0bv32, old(#t~string388!offset)=0bv32, old(#t~string391!base)=0bv32, old(#t~string391!offset)=0bv32, old(~#features~0!base)=0bv32, old(~#features~0!offset)=0bv32, old(~#id_table~0!base)=0bv32, old(~#id_table~0!offset)=0bv32, old(~#virtblk_fops~0!base)=0bv32, old(~#virtblk_fops~0!offset)=0bv32, old(~#virtio_blk~0!base)=0bv32, old(~#virtio_blk~0!offset)=0bv32, old(~__mod_virtio_device_table~0!device)=0bv32, old(~__mod_virtio_device_table~0!vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#features~0!base=0bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=0bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=0bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=0bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28bv32); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22bv32); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9bv32); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5bv32); [L4180] FCALL call write~init~intINTTYPE1(118bv8, { base: #t~string306!base, offset: #t~string306!offset }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(100bv8, { base: #t~string306!base, offset: ~bvadd32(1bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string306!base, offset: ~bvadd32(2bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string306!base, offset: ~bvadd32(3bv32, #t~string306!offset) }, 1bv32); [L4180] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string306!base, offset: ~bvadd32(4bv32, #t~string306!offset) }, 1bv32); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7bv32); [L4183] FCALL call write~init~intINTTYPE1(118bv8, { base: #t~string309!base, offset: #t~string309!offset }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(100bv8, { base: #t~string309!base, offset: ~bvadd32(1bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string309!base, offset: ~bvadd32(2bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string309!base, offset: ~bvadd32(3bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(37bv8, { base: #t~string309!base, offset: ~bvadd32(4bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(99bv8, { base: #t~string309!base, offset: ~bvadd32(5bv32, #t~string309!offset) }, 1bv32); [L4183] FCALL call write~init~intINTTYPE1(0bv8, { base: #t~string309!base, offset: ~bvadd32(6bv32, #t~string309!offset) }, 1bv32); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9bv32); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11bv32); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8bv32); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8bv32); [L3726] ~major~0 := 0bv32; [L3727] ~index~0 := 0bv32; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#features~0!base, offset: ~#features~0!offset }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#features~0!base, offset: ~bvadd32(4bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(1bv32, { base: ~#features~0!base, offset: ~bvadd32(8bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(4bv32, { base: ~#features~0!base, offset: ~bvadd32(12bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(5bv32, { base: ~#features~0!base, offset: ~bvadd32(16bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(6bv32, { base: ~#features~0!base, offset: ~bvadd32(20bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(7bv32, { base: ~#features~0!base, offset: ~bvadd32(24bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(9bv32, { base: ~#features~0!base, offset: ~bvadd32(28bv32, ~#features~0!offset) }, 4bv32); [L4299-L4302] FCALL call write~init~intINTTYPE4(10bv32, { base: ~#features~0!base, offset: ~bvadd32(32bv32, ~#features~0!offset) }, 4bv32); [L4335] ~LDV_IN_INTERRUPT~0 := 0bv32; [L4496] ~ldv_blk_rq~0 := 0bv32; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(8bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(16bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(24bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(32bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(40bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(48bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(56bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(64bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(72bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(80bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: ~bvadd32(88bv32, ~#virtblk_fops~0!offset) }, 8bv32); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(2bv32, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(4294967295bv32, { base: ~#id_table~0!base, offset: ~bvadd32(4bv32, ~#id_table~0!offset) }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#id_table~0!base, offset: ~bvadd32(8bv32, ~#id_table~0!offset) }, 4bv32); [L4297-L4298] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#id_table~0!base, offset: ~bvadd32(12bv32, ~#id_table~0!offset) }, 4bv32); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(8bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(16bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(24bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~intINTTYPE1(0bv8, { base: ~#virtio_blk~0!base, offset: ~bvadd32(32bv32, ~#virtio_blk~0!offset) }, 1bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(33bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(41bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(49bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(57bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(65bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(73bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(81bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(89bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(97bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: ~bvadd32(105bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~intINTTYPE4(9bv32, { base: ~#virtio_blk~0!base, offset: ~bvadd32(113bv32, ~#virtio_blk~0!offset) }, 4bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: ~bvadd32(117bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: ~bvadd32(125bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#virtio_blk~0!base, offset: ~bvadd32(133bv32, ~#virtio_blk~0!offset) }, 8bv32); [L4330] ~__mod_virtio_device_table~0!device := 0bv32; [L4330] ~__mod_virtio_device_table~0!vendor := 0bv32; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(#t~string108!base)=0bv32, old(#t~string108!offset)=0bv32, old(#t~string289!base)=0bv32, old(#t~string289!offset)=0bv32, old(#t~string292!base)=0bv32, old(#t~string292!offset)=0bv32, old(#t~string306!base)=0bv32, old(#t~string306!offset)=0bv32, old(#t~string309!base)=0bv32, old(#t~string309!offset)=0bv32, old(#t~string312!base)=0bv32, old(#t~string312!offset)=0bv32, old(#t~string387!base)=0bv32, old(#t~string387!offset)=0bv32, old(#t~string388!base)=0bv32, old(#t~string388!offset)=0bv32, old(#t~string391!base)=0bv32, old(#t~string391!offset)=0bv32, old(~#features~0!base)=0bv32, old(~#features~0!offset)=0bv32, old(~#id_table~0!base)=0bv32, old(~#id_table~0!offset)=0bv32, old(~#virtblk_fops~0!base)=0bv32, old(~#virtblk_fops~0!offset)=0bv32, old(~#virtio_blk~0!base)=0bv32, old(~#virtio_blk~0!offset)=0bv32, old(~__mod_virtio_device_table~0!device)=0bv32, old(~__mod_virtio_device_table~0!vendor)=0bv32, old(~index~0)=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [?] CALL call #t~ret405 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=0bv32, ~major~0=0bv32] [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1bv32; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] CALL call #t~ret392 := init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0bv32, #t~string388); [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32] [L4311] COND FALSE !(~bvslt32(~major~0, 0bv32)) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~20=0bv32] [L4351] RET call #t~ret392 := init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret392=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4352] COND FALSE !(0bv32 != ~tmp~21) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~21=0bv32] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4375] COND TRUE 0bv32 != ~tmp___1~8 VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0bv32 == ~tmp___0~13; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32] [L4363] CALL call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20bv32); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: ~bvadd32(240bv32, ~bdev!offset) }, 8bv32); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: ~bvadd32(1075bv32, ~disk~0!offset) }, 8bv32); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4025] COND TRUE 1447184708bv32 == ~cmd [L4026] ~usr_data~0 := { base: 0bv32, offset: ~data[32:0] }; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4027] CALL call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: ~bvadd32(1075bv32, ~disk!offset) }, 8bv32); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: ~bvadd32(1067bv32, #t~mem250!offset) }, 8bv32); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20bv32, 208bv32); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~ret252; [L3987] havoc #t~mem250; [L3987] havoc #t~mem251; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr!base, ~ptr!offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret400=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=0bv32, #in~ptr!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=0bv32, ~ptr!offset=0bv32, ~tmp~24=0bv64] [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret253=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3989] COND FALSE !(0bv64 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: ~bvadd32(1067bv32, #t~mem255!offset) }, 8bv32); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem255!base=1978bv32, #t~mem255!offset=4294966241bv32, #t~mem256!base=1978bv32, #t~mem256!offset=4294966241bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3995] CALL call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208bv32); VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L4424] CALL call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4502] COND TRUE 0bv32 == ~ldv_blk_rq~0 VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=0bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4507] COND TRUE (16bv32 == ~mask || 208bv32 == ~mask) || 16bv32 == ~mask [L4508] ~ldv_blk_rq~0 := 1bv32; VAL [#in~mask=208bv32, #in~res!base=1978bv32, #in~res!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mask=208bv32, ~res!base=1978bv32, ~res!offset=4294967244bv32] [L4424] RET call ldv_get_blk_rq(~ldv_func_res~0, ~ldv_func_arg3); VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L4425] #res := ~ldv_func_res~0; VAL [#in~ldv_func_arg1!base=1978bv32, #in~ldv_func_arg1!offset=4294966241bv32, #in~ldv_func_arg2!base=0bv32, #in~ldv_func_arg2!offset=0bv32, #in~ldv_func_arg3=208bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res!base=1978bv32, #res!offset=4294967244bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~ldv_func_arg1!base=1978bv32, ~ldv_func_arg1!offset=4294966241bv32, ~ldv_func_arg2!base=0bv32, ~ldv_func_arg2!offset=0bv32, ~ldv_func_arg3=208bv32, ~ldv_func_res~0!base=1978bv32, ~ldv_func_res~0!offset=4294967244bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp~25!base=1978bv32, ~tmp~25!offset=4294967244bv32] [L3995] RET call #t~ret257 := ldv_blk_make_request_5(#t~mem256, ~bio~0, 208bv32); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem255!base=1978bv32, #t~mem255!offset=4294966241bv32, #t~mem256!base=1978bv32, #t~mem256!offset=4294966241bv32, #t~ret257!base=1978bv32, #t~ret257!offset=4294967244bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem255; [L3995] havoc #t~mem256; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := ~sign_extendFrom32To64((if ~bvugt64(~sign_extendFrom32To64(~bvadd32(~ptr!base, ~ptr!offset)), 2012bv64) then 1bv32 else 0bv32)); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret400=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32] [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; VAL [#in~ptr!base=1978bv32, #in~ptr!offset=4294967244bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~ptr!base=1978bv32, ~ptr!offset=4294967244bv32, ~tmp~24=0bv64] [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret258=0bv64, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L3997] COND FALSE !(0bv64 != ~tmp___2~1) [L4004] FCALL call write~intINTTYPE4(7bv32, { base: ~req~1!base, offset: ~bvadd32(64bv32, ~req~1!offset) }, 4bv32); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: ~bvadd32(1067bv32, #t~mem260!offset) }, 8bv32); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: ~bvadd32(72bv32, ~vblk~2!offset) }, 8bv32); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0bv32); [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4005] havoc #t~mem262; [L4005] havoc #t~mem261; [L4006] #res := ~tmp___3~1; VAL [#in~disk!base=2147485626bv32, #in~disk!offset=4294966233bv32, #in~id_str!base=402653395bv32, #in~id_str!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bio~0!base=0bv32, ~bio~0!offset=0bv32, ~disk!base=2147485626bv32, ~disk!offset=4294966233bv32, ~id_str!base=402653395bv32, ~id_str!offset=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~req~1!base=1978bv32, ~req~1!offset=4294967244bv32, ~tmp___0~9=0bv64, ~tmp___2~1=0bv64, ~tmp___3~1=1bv32, ~vblk~2!base=1978bv32, ~vblk~2!offset=4294967236bv32] [L4027] RET call #t~ret266 := virtblk_get_id(~disk~0, ~#id_str~0); VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~ret266=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4028] COND FALSE !(0bv32 == ~err~1) VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_str~0!base=402653395bv32, ~#id_str~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#in~bdev!base=3221227450bv32, #in~bdev!offset=4294967068bv32, #in~cmd=1447184708bv32, #in~data=0bv64, #in~mode=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #res=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~bdev!base=3221227450bv32, ~bdev!offset=4294967068bv32, ~cmd=1447184708bv32, ~data=0bv64, ~disk~0!base=2147485626bv32, ~disk~0!offset=4294966233bv32, ~err~1=1bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~mode=0bv32, ~usr_data~0!base=0bv32, ~usr_data~0!offset=0bv32, ~vblk~3!base=1978bv32, ~vblk~3!offset=4294967236bv32] [L4363] RET call #t~ret395 := virtblk_ioctl(~var_group1~0, ~var_virtblk_ioctl_5_p1~0, ~var_virtblk_ioctl_5_p2~0, ~var_virtblk_ioctl_5_p3~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~ret395=1bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4363] havoc #t~ret395; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=1bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4375] COND FALSE !(0bv32 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4382] CALL call fini(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4382] RET call fini(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, #t~switch394=true, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32, ~tmp___0~13=0bv32, ~tmp___1~8=0bv32, ~tmp~21=0bv32, ~var_group1~0!base=3221227450bv32, ~var_group1~0!offset=4294967068bv32, ~var_virtblk_ioctl_5_p1~0=0bv32, ~var_virtblk_ioctl_5_p2~0=1447184708bv32, ~var_virtblk_ioctl_5_p3~0=0bv64] [L4384] CALL call ldv_check_final_state(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4542] COND FALSE !(0bv32 == ~ldv_blk_rq~0) VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4545] CALL call ldv_error(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L4433] assert false; VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~string108!base=850bv32, #t~string108!offset=0bv32, #t~string289!base=5bv32, #t~string289!offset=0bv32, #t~string292!base=1bv32, #t~string292!offset=0bv32, #t~string306!base=1978bv32, #t~string306!offset=0bv32, #t~string309!base=1982bv32, #t~string309!offset=0bv32, #t~string312!base=2bv32, #t~string312!offset=0bv32, #t~string387!base=3bv32, #t~string387!offset=0bv32, #t~string388!base=134218643bv32, #t~string388!offset=0bv32, #t~string391!base=33554433bv32, #t~string391!offset=0bv32, old(~ldv_blk_rq~0)=0bv32, old(~LDV_IN_INTERRUPT~0)=0bv32, old(~major~0)=0bv32, ~#__this_module~0!base=0bv32, ~#__this_module~0!offset=0bv32, ~#features~0!base=656bv32, ~#features~0!offset=0bv32, ~#id_table~0!base=131890bv32, ~#id_table~0!offset=0bv32, ~#virtblk_fops~0!base=395931bv32, ~#virtblk_fops~0!offset=0bv32, ~#virtio_blk~0!base=1979bv32, ~#virtio_blk~0!offset=0bv32, ~__mod_virtio_device_table~0!device=0bv32, ~__mod_virtio_device_table~0!vendor=0bv32, ~index~0=0bv32, ~ldv_blk_rq~0=1bv32, ~LDV_IN_INTERRUPT~0=1bv32, ~major~0=0bv32] [L3726] static int major ; [L3727] static int index ; [L4299-L4302] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4335] int LDV_IN_INTERRUPT ; [L4496] int ldv_blk_rq = 0; [L4080-L4081] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4297-L4298] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4303-L4304] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4330] struct virtio_device_id const __mod_virtio_device_table ; VAL [\old(__mod_virtio_device_table)=0, \old(__mod_virtio_device_table)=0, \old(features)=null, \old(features)=null, \old(id_table)=null, \old(id_table)=null, \old(index)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(virtblk_fops)=null, \old(virtblk_fops)=null, \old(virtio_blk)=null, \old(virtio_blk)=null, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=0, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4338] struct block_device *var_group1 ; [L4339] fmode_t var_virtblk_ioctl_5_p1 ; [L4340] unsigned int var_virtblk_ioctl_5_p2 ; [L4341] unsigned long var_virtblk_ioctl_5_p3 ; [L4342] struct hd_geometry *var_group2 ; [L4343] int tmp ; [L4344] int tmp___0 ; [L4345] int tmp___1 ; [L4348] LDV_IN_INTERRUPT = 1 [L4351] CALL, EXPR init() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4307] int tmp ; [L4310] major = register_blkdev(0U, "virtblk") [L4311] COND FALSE !(major < 0) [L4316] tmp = register_virtio_driver(& virtio_blk) [L4317] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4351] RET, EXPR init() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, init()=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4351] tmp = init() [L4352] COND FALSE !(tmp != 0) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND TRUE tmp___1 != 0 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___1=1, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4359] tmp___0 = __VERIFIER_nondet_int() [L4361] case 0: [L4363] CALL virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3) VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4012] struct gendisk *disk ; [L4013] struct virtio_blk *vblk ; [L4014] void *usr_data ; [L4015] char id_str[20U] ; [L4016] int err ; [L4017] int tmp ; [L4018] bool tmp___0 ; [L4019] int tmp___1 ; [L4020] int tmp___2 ; [L4023] EXPR bdev->bd_disk [L4023] disk = bdev->bd_disk [L4024] EXPR disk->private_data [L4024] vblk = (struct virtio_blk *)disk->private_data [L4025] COND TRUE cmd == 1447184708U [L4026] usr_data = (void *)data VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, bdev={-1073739846:-228}, cmd=1447184708, data=0, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mode=0, usr_data={0:0}, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4027] CALL, EXPR virtblk_get_id(disk, (char *)(& id_str)) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3976] struct virtio_blk *vblk ; [L3977] struct request *req ; [L3978] struct bio *bio ; [L3979] long tmp ; [L3980] long tmp___0 ; [L3981] long tmp___1 ; [L3982] long tmp___2 ; [L3983] int tmp___3 ; [L3986] EXPR disk->private_data [L3986] vblk = (struct virtio_blk *)disk->private_data [L3987] EXPR vblk->disk [L3987] EXPR (vblk->disk)->queue [L3987] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L3988] CALL, EXPR IS_ERR((void const *)bio) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4408] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4449] return ((unsigned long )ptr > 2012UL); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, tmp=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3988] RET, EXPR IS_ERR((void const *)bio) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, IS_ERR((void const *)bio)=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3988] tmp___0 = IS_ERR((void const *)bio) [L3989] COND FALSE !(tmp___0 != 0L) [L3995] EXPR vblk->disk [L3995] EXPR (vblk->disk)->queue VAL [(vblk->disk)->queue={1978:-1055}, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp___0=0, vblk={1978:-60}, vblk->disk={1978:-1055}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3995] CALL, EXPR ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, ldv_func_arg1={1978:-1055}, ldv_func_arg2={0:0}, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4418] ldv_func_ret_type___3 ldv_func_res ; [L4419] struct request *tmp ; [L4422] tmp = blk_make_request(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L4423] ldv_func_res = tmp VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, ldv_func_arg1={1978:-1055}, ldv_func_arg1={1978:-1055}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={1978:-52}, LDV_IN_INTERRUPT=1, major=0, tmp={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4424] CALL ldv_get_blk_rq(ldv_func_res, ldv_func_arg3) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, res={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4499] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mask=208, res={1978:-52}, res={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4502] COND TRUE ldv_blk_rq == 0 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mask=208, res={1978:-52}, res={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4507] COND TRUE (mask == 16U || mask == 208U) || mask == 16U [L4508] ldv_blk_rq = 1 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mask=208, res={1978:-52}, res={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4424] RET ldv_get_blk_rq(ldv_func_res, ldv_func_arg3) VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, ldv_func_arg1={1978:-1055}, ldv_func_arg1={1978:-1055}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={1978:-52}, LDV_IN_INTERRUPT=1, major=0, tmp={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4425] return (ldv_func_res); VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result={1978:-52}, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, ldv_func_arg1={1978:-1055}, ldv_func_arg1={1978:-1055}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={1978:-52}, LDV_IN_INTERRUPT=1, major=0, tmp={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3995] RET, EXPR ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) VAL [(vblk->disk)->queue={1978:-1055}, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U)={1978:-52}, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp___0=0, vblk={1978:-60}, vblk->disk={1978:-1055}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3995] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L3996] CALL, EXPR IS_ERR((void const *)req) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4408] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4449] return ((unsigned long )ptr > 2012UL); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={1978:-52}, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, ptr={1978:-52}, tmp=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3996] RET, EXPR IS_ERR((void const *)req) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, IS_ERR((void const *)req)=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, req={1978:-52}, tmp___0=0, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3996] tmp___2 = IS_ERR((void const *)req) [L3997] COND FALSE !(tmp___2 != 0L) [L4004] req->cmd_type = 7 [L4005] EXPR vblk->disk [L4005] EXPR (vblk->disk)->queue [L4005] EXPR vblk->disk [L4005] tmp___3 = blk_execute_rq((vblk->disk)->queue, vblk->disk, req, 0) [L4006] return (tmp___3); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=1, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, req={1978:-52}, tmp___0=0, tmp___2=0, tmp___3=1, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4027] RET, EXPR virtblk_get_id(disk, (char *)(& id_str)) VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, bdev={-1073739846:-228}, cmd=1447184708, data=0, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=0, usr_data={0:0}, vblk={1978:-60}, virtblk_fops={395931:0}, virtblk_get_id(disk, (char *)(& id_str))=1, virtio_blk={1979:0}] [L4027] err = virtblk_get_id(disk, (char *)(& id_str)) [L4028] COND FALSE !(err == 0) VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, bdev={-1073739846:-228}, cmd=1447184708, data=0, disk={-2147481670:-1063}, err=1, features={656:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=0, usr_data={0:0}, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4038] return (err); [L4038] return (err); VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, \result=1, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, bdev={-1073739846:-228}, cmd=1447184708, data=0, disk={-2147481670:-1063}, err=1, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=0, usr_data={0:0}, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4363] RET virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___0=0, tmp___1=1, var_group1={-1073739846:-228}, var_virtblk_ioctl_5_p1=0, var_virtblk_ioctl_5_p2=1447184708, var_virtblk_ioctl_5_p3=0, virtblk_fops={395931:0}, virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3)=1, virtio_blk={1979:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND FALSE !(tmp___1 != 0) [L4382] CALL fini() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4382] RET fini() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___0=0, tmp___1=0, var_group1={-1073739846:-228}, var_virtblk_ioctl_5_p1=0, var_virtblk_ioctl_5_p2=1447184708, var_virtblk_ioctl_5_p3=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4384] CALL ldv_check_final_state() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4542] COND FALSE !(ldv_blk_rq == 0) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4545] CALL ldv_error() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4433] __VERIFIER_error() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] ----- [2018-11-23 00:24:10,697 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:24:10 BoogieIcfgContainer [2018-11-23 00:24:10,697 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 00:24:10,698 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 00:24:10,698 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 00:24:10,698 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 00:24:10,698 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:24:06" (3/4) ... [2018-11-23 00:24:10,703 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 00:24:10,703 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 00:24:10,703 INFO L168 Benchmark]: Toolchain (without parser) took 5963.99 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 235.4 MB). Free memory was 944.4 MB in the beginning and 1.1 GB in the end (delta: -201.9 MB). Peak memory consumption was 33.6 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:10,705 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:24:10,706 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1094.03 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 172.0 MB). Free memory was 944.4 MB in the beginning and 1.1 GB in the end (delta: -138.3 MB). Peak memory consumption was 102.4 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:10,706 INFO L168 Benchmark]: Boogie Procedure Inliner took 43.47 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:24:10,707 INFO L168 Benchmark]: Boogie Preprocessor took 45.62 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.2 MB). Peak memory consumption was 5.2 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:10,707 INFO L168 Benchmark]: RCFGBuilder took 701.80 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 66.2 MB). Peak memory consumption was 66.2 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:10,708 INFO L168 Benchmark]: TraceAbstraction took 4070.45 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 63.4 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -135.0 MB). Peak memory consumption was 194.9 MB. Max. memory is 11.5 GB. [2018-11-23 00:24:10,708 INFO L168 Benchmark]: Witness Printer took 5.17 ms. Allocated memory is still 1.3 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 00:24:10,713 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1094.03 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 172.0 MB). Free memory was 944.4 MB in the beginning and 1.1 GB in the end (delta: -138.3 MB). Peak memory consumption was 102.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 43.47 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 45.62 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.2 MB). Peak memory consumption was 5.2 MB. Max. memory is 11.5 GB. * RCFGBuilder took 701.80 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 66.2 MB). Peak memory consumption was 66.2 MB. Max. memory is 11.5 GB. * TraceAbstraction took 4070.45 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 63.4 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -135.0 MB). Peak memory consumption was 194.9 MB. Max. memory is 11.5 GB. * Witness Printer took 5.17 ms. Allocated memory is still 1.3 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~virtio_driver?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?id_table~*virtio_device_id?feature_table~*UINT?feature_table_size~UINT?probe~*((*virtio_device ) : INT)?remove~*((*virtio_device ) : VOID)?config_changed~*((*virtio_device ) : VOID)# - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~STRUCT~~virtio_device_id?device~~__u32~0?vendor~~__u32~0## - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~STRUCT~~virtio_device_id?device~~__u32~0?vendor~~__u32~0## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~block_device_operations?open~*((*block_device ~fmode_t~0 ) : INT)?release~*((*gendisk ~fmode_t~0 ) : INT)?locked_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?compat_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?direct_access~*((*block_device ~sector_t~0 **VOID *ULONG ) : INT)?media_changed~*((*gendisk ) : INT)?unlock_native_capacity~*((*gendisk ) : VOID)?revalidate_disk~*((*gendisk ) : INT)?getgeo~*((*block_device *hd_geometry ) : INT)?swap_slot_free_notify~*((*block_device ULONG ) : VOID)?owner~*module# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~UINT# - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~block_device_operations?open~*((*block_device ~fmode_t~0 ) : INT)?release~*((*gendisk ~fmode_t~0 ) : INT)?locked_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?compat_ioctl~*((*block_device ~fmode_t~0 UINT ULONG ) : INT)?direct_access~*((*block_device ~sector_t~0 **VOID *ULONG ) : INT)?media_changed~*((*gendisk ) : INT)?unlock_native_capacity~*((*gendisk ) : VOID)?revalidate_disk~*((*gendisk ) : INT)?getgeo~*((*block_device *hd_geometry ) : INT)?swap_slot_free_notify~*((*block_device ULONG ) : VOID)?owner~*module# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~virtio_driver?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?id_table~*virtio_device_id?feature_table~*UINT?feature_table_size~UINT?probe~*((*virtio_device ) : INT)?remove~*((*virtio_device ) : VOID)?config_changed~*((*virtio_device ) : VOID)# - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType ARRAY#_unrecognizedDimensions_~UINT# - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch394 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch394 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 4433]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 4310. Possible FailurePath: [L3726] static int major ; [L3727] static int index ; [L4299-L4302] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4335] int LDV_IN_INTERRUPT ; [L4496] int ldv_blk_rq = 0; [L4080-L4081] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4297-L4298] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4303-L4304] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4330] struct virtio_device_id const __mod_virtio_device_table ; VAL [\old(__mod_virtio_device_table)=0, \old(__mod_virtio_device_table)=0, \old(features)=null, \old(features)=null, \old(id_table)=null, \old(id_table)=null, \old(index)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(virtblk_fops)=null, \old(virtblk_fops)=null, \old(virtio_blk)=null, \old(virtio_blk)=null, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=0, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4338] struct block_device *var_group1 ; [L4339] fmode_t var_virtblk_ioctl_5_p1 ; [L4340] unsigned int var_virtblk_ioctl_5_p2 ; [L4341] unsigned long var_virtblk_ioctl_5_p3 ; [L4342] struct hd_geometry *var_group2 ; [L4343] int tmp ; [L4344] int tmp___0 ; [L4345] int tmp___1 ; [L4348] LDV_IN_INTERRUPT = 1 [L4351] CALL, EXPR init() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4307] int tmp ; [L4310] major = register_blkdev(0U, "virtblk") [L4311] COND FALSE !(major < 0) [L4316] tmp = register_virtio_driver(& virtio_blk) [L4317] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4351] RET, EXPR init() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, init()=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4351] tmp = init() [L4352] COND FALSE !(tmp != 0) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND TRUE tmp___1 != 0 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___1=1, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4359] tmp___0 = __VERIFIER_nondet_int() [L4361] case 0: [L4363] CALL virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3) VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4012] struct gendisk *disk ; [L4013] struct virtio_blk *vblk ; [L4014] void *usr_data ; [L4015] char id_str[20U] ; [L4016] int err ; [L4017] int tmp ; [L4018] bool tmp___0 ; [L4019] int tmp___1 ; [L4020] int tmp___2 ; [L4023] EXPR bdev->bd_disk [L4023] disk = bdev->bd_disk [L4024] EXPR disk->private_data [L4024] vblk = (struct virtio_blk *)disk->private_data [L4025] COND TRUE cmd == 1447184708U [L4026] usr_data = (void *)data VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, bdev={-1073739846:-228}, cmd=1447184708, data=0, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mode=0, usr_data={0:0}, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4027] CALL, EXPR virtblk_get_id(disk, (char *)(& id_str)) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3976] struct virtio_blk *vblk ; [L3977] struct request *req ; [L3978] struct bio *bio ; [L3979] long tmp ; [L3980] long tmp___0 ; [L3981] long tmp___1 ; [L3982] long tmp___2 ; [L3983] int tmp___3 ; [L3986] EXPR disk->private_data [L3986] vblk = (struct virtio_blk *)disk->private_data [L3987] EXPR vblk->disk [L3987] EXPR (vblk->disk)->queue [L3987] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L3988] CALL, EXPR IS_ERR((void const *)bio) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4408] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4449] return ((unsigned long )ptr > 2012UL); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, tmp=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3988] RET, EXPR IS_ERR((void const *)bio) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, IS_ERR((void const *)bio)=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3988] tmp___0 = IS_ERR((void const *)bio) [L3989] COND FALSE !(tmp___0 != 0L) [L3995] EXPR vblk->disk [L3995] EXPR (vblk->disk)->queue VAL [(vblk->disk)->queue={1978:-1055}, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, tmp___0=0, vblk={1978:-60}, vblk->disk={1978:-1055}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3995] CALL, EXPR ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, ldv_func_arg1={1978:-1055}, ldv_func_arg2={0:0}, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4418] ldv_func_ret_type___3 ldv_func_res ; [L4419] struct request *tmp ; [L4422] tmp = blk_make_request(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L4423] ldv_func_res = tmp VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, ldv_func_arg1={1978:-1055}, ldv_func_arg1={1978:-1055}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={1978:-52}, LDV_IN_INTERRUPT=1, major=0, tmp={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4424] CALL ldv_get_blk_rq(ldv_func_res, ldv_func_arg3) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, res={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4499] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mask=208, res={1978:-52}, res={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4502] COND TRUE ldv_blk_rq == 0 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, mask=208, res={1978:-52}, res={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4507] COND TRUE (mask == 16U || mask == 208U) || mask == 16U [L4508] ldv_blk_rq = 1 VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mask)=208, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mask=208, res={1978:-52}, res={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4424] RET ldv_get_blk_rq(ldv_func_res, ldv_func_arg3) VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, ldv_func_arg1={1978:-1055}, ldv_func_arg1={1978:-1055}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={1978:-52}, LDV_IN_INTERRUPT=1, major=0, tmp={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4425] return (ldv_func_res); VAL [\old(ldv_blk_rq)=0, \old(ldv_func_arg3)=208, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result={1978:-52}, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, ldv_func_arg1={1978:-1055}, ldv_func_arg1={1978:-1055}, ldv_func_arg2={0:0}, ldv_func_arg2={0:0}, ldv_func_arg3=208, ldv_func_res={1978:-52}, LDV_IN_INTERRUPT=1, major=0, tmp={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3995] RET, EXPR ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) VAL [(vblk->disk)->queue={1978:-1055}, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U)={1978:-52}, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp___0=0, vblk={1978:-60}, vblk->disk={1978:-1055}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3995] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L3996] CALL, EXPR IS_ERR((void const *)req) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4408] long tmp ; VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4449] return ((unsigned long )ptr > 2012UL); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] RET, EXPR ldv_is_err(ptr) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={1978:-52}, ptr={1978:-52}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={1978:-52}, ptr={1978:-52}, tmp=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3996] RET, EXPR IS_ERR((void const *)req) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, IS_ERR((void const *)req)=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, req={1978:-52}, tmp___0=0, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L3996] tmp___2 = IS_ERR((void const *)req) [L3997] COND FALSE !(tmp___2 != 0L) [L4004] req->cmd_type = 7 [L4005] EXPR vblk->disk [L4005] EXPR (vblk->disk)->queue [L4005] EXPR vblk->disk [L4005] tmp___3 = blk_execute_rq((vblk->disk)->queue, vblk->disk, req, 0) [L4006] return (tmp___3); VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \result=1, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bio={0:0}, disk={-2147481670:-1063}, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, req={1978:-52}, tmp___0=0, tmp___2=0, tmp___3=1, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4027] RET, EXPR virtblk_get_id(disk, (char *)(& id_str)) VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, bdev={-1073739846:-228}, cmd=1447184708, data=0, disk={-2147481670:-1063}, features={656:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=0, usr_data={0:0}, vblk={1978:-60}, virtblk_fops={395931:0}, virtblk_get_id(disk, (char *)(& id_str))=1, virtio_blk={1979:0}] [L4027] err = virtblk_get_id(disk, (char *)(& id_str)) [L4028] COND FALSE !(err == 0) VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, bdev={-1073739846:-228}, cmd=1447184708, data=0, disk={-2147481670:-1063}, err=1, features={656:0}, id_str={402653395:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=0, usr_data={0:0}, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4038] return (err); [L4038] return (err); VAL [\old(cmd)=1447184708, \old(data)=0, \old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, \old(mode)=0, \result=1, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, bdev={-1073739846:-228}, bdev={-1073739846:-228}, cmd=1447184708, data=0, disk={-2147481670:-1063}, err=1, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, mode=0, usr_data={0:0}, vblk={1978:-60}, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4363] RET virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___0=0, tmp___1=1, var_group1={-1073739846:-228}, var_virtblk_ioctl_5_p1=0, var_virtblk_ioctl_5_p2=1447184708, var_virtblk_ioctl_5_p3=0, virtblk_fops={395931:0}, virtblk_ioctl(var_group1, var_virtblk_ioctl_5_p1, var_virtblk_ioctl_5_p2, var_virtblk_ioctl_5_p3)=1, virtio_blk={1979:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND FALSE !(tmp___1 != 0) [L4382] CALL fini() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4382] RET fini() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, tmp=0, tmp___0=0, tmp___1=0, var_group1={-1073739846:-228}, var_virtblk_ioctl_5_p1=0, var_virtblk_ioctl_5_p2=1447184708, var_virtblk_ioctl_5_p3=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4384] CALL ldv_check_final_state() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4542] COND FALSE !(ldv_blk_rq == 0) VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4545] CALL ldv_error() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] [L4433] __VERIFIER_error() VAL [\old(ldv_blk_rq)=0, \old(LDV_IN_INTERRUPT)=0, \old(major)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={0:0}, features={656:0}, id_table={131890:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={395931:0}, virtio_blk={1979:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 24 procedures, 147 locations, 1 error locations. UNSAFE Result, 4.0s OverallTime, 3 OverallIterations, 2 TraceHistogramMax, 0.1s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 361 SDtfs, 152 SDslu, 605 SDs, 0 SdLazy, 13 SolverSat, 3 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.0s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 89 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=240occurred in iteration=1, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 2 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 1.1s SatisfiabilityAnalysisTime, 0.1s InterpolantComputationTime, 165 NumberOfCodeBlocks, 165 NumberOfCodeBlocksAsserted, 3 NumberOfCheckSat, 89 ConstructedInterpolants, 0 QuantifiedInterpolants, 6585 SizeOfPredicates, 3 NumberOfNonLiveVariables, 652 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 2 InterpolantComputations, 2 PerfectInterpolantSequences, 10/10 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...