./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i -s /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1259db070705cc8318f4cd544a981db9ba453479 ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i -s /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1259db070705cc8318f4cd544a981db9ba453479 ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-22 22:21:16,656 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-22 22:21:16,657 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-22 22:21:16,666 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-22 22:21:16,666 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-22 22:21:16,667 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-22 22:21:16,668 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-22 22:21:16,669 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-22 22:21:16,670 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-22 22:21:16,671 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-22 22:21:16,672 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-22 22:21:16,672 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-22 22:21:16,673 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-22 22:21:16,673 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-22 22:21:16,674 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-22 22:21:16,675 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-22 22:21:16,675 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-22 22:21:16,677 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-22 22:21:16,678 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-22 22:21:16,679 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-22 22:21:16,680 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-22 22:21:16,681 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-22 22:21:16,683 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-22 22:21:16,683 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-22 22:21:16,683 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-22 22:21:16,684 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-22 22:21:16,685 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-22 22:21:16,686 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-22 22:21:16,686 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-22 22:21:16,687 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-22 22:21:16,687 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-22 22:21:16,688 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-22 22:21:16,688 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-22 22:21:16,688 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-22 22:21:16,689 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-22 22:21:16,690 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-22 22:21:16,690 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf [2018-11-22 22:21:16,701 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-22 22:21:16,701 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-22 22:21:16,702 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-22 22:21:16,702 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-22 22:21:16,703 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-22 22:21:16,703 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-22 22:21:16,703 INFO L133 SettingsManager]: * Use SBE=true [2018-11-22 22:21:16,703 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-22 22:21:16,703 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-22 22:21:16,704 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-22 22:21:16,704 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-22 22:21:16,704 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-22 22:21:16,704 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-22 22:21:16,704 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-22 22:21:16,704 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-22 22:21:16,704 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-22 22:21:16,705 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-22 22:21:16,705 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-22 22:21:16,705 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-22 22:21:16,705 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-22 22:21:16,705 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-22 22:21:16,706 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-22 22:21:16,706 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-22 22:21:16,706 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-22 22:21:16,706 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-22 22:21:16,706 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-22 22:21:16,706 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-22 22:21:16,706 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-22 22:21:16,707 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1259db070705cc8318f4cd544a981db9ba453479 [2018-11-22 22:21:16,731 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-22 22:21:16,740 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-22 22:21:16,743 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-22 22:21:16,744 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-22 22:21:16,744 INFO L276 PluginConnector]: CDTParser initialized [2018-11-22 22:21:16,745 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-22 22:21:16,790 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data/889bc8a40/0a8bf9cea62c4c4383f26cd94afa4ac3/FLAG599c2ef25 [2018-11-22 22:21:17,251 INFO L307 CDTParser]: Found 1 translation units. [2018-11-22 22:21:17,251 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-22 22:21:17,272 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data/889bc8a40/0a8bf9cea62c4c4383f26cd94afa4ac3/FLAG599c2ef25 [2018-11-22 22:21:17,554 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data/889bc8a40/0a8bf9cea62c4c4383f26cd94afa4ac3 [2018-11-22 22:21:17,556 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-22 22:21:17,557 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-22 22:21:17,557 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-22 22:21:17,558 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-22 22:21:17,561 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-22 22:21:17,561 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:21:17" (1/1) ... [2018-11-22 22:21:17,564 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1c5d0a2a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:17, skipping insertion in model container [2018-11-22 22:21:17,564 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:21:17" (1/1) ... [2018-11-22 22:21:17,571 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-22 22:21:17,632 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-22 22:21:18,166 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:21:18,183 INFO L191 MainTranslator]: Completed pre-run [2018-11-22 22:21:18,293 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:21:18,326 INFO L195 MainTranslator]: Completed translation [2018-11-22 22:21:18,326 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18 WrapperNode [2018-11-22 22:21:18,326 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-22 22:21:18,327 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-22 22:21:18,327 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-22 22:21:18,327 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-22 22:21:18,334 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... [2018-11-22 22:21:18,352 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... [2018-11-22 22:21:18,360 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-22 22:21:18,360 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-22 22:21:18,360 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-22 22:21:18,361 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-22 22:21:18,369 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... [2018-11-22 22:21:18,369 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... [2018-11-22 22:21:18,376 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... [2018-11-22 22:21:18,377 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... [2018-11-22 22:21:18,404 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... [2018-11-22 22:21:18,410 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... [2018-11-22 22:21:18,414 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... [2018-11-22 22:21:18,419 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-22 22:21:18,419 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-22 22:21:18,420 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-22 22:21:18,420 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-22 22:21:18,420 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-22 22:21:18,458 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-22 22:21:18,458 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2018-11-22 22:21:18,458 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-22 22:21:18,458 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-22 22:21:18,459 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2018-11-22 22:21:18,459 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2018-11-22 22:21:18,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-22 22:21:18,459 INFO L130 BoogieDeclarations]: Found specification of procedure input_free_device [2018-11-22 22:21:18,459 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-22 22:21:18,459 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2018-11-22 22:21:18,459 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2018-11-22 22:21:18,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-22 22:21:18,460 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-22 22:21:18,460 INFO L130 BoogieDeclarations]: Found specification of procedure usb_deregister [2018-11-22 22:21:18,460 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2018-11-22 22:21:18,460 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2018-11-22 22:21:18,460 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_init [2018-11-22 22:21:18,460 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_init [2018-11-22 22:21:18,460 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-22 22:21:18,460 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_int [2018-11-22 22:21:18,460 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_int [2018-11-22 22:21:18,461 INFO L130 BoogieDeclarations]: Found specification of procedure strlcpy [2018-11-22 22:21:18,461 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register_driver [2018-11-22 22:21:18,461 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2018-11-22 22:21:18,461 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2018-11-22 22:21:18,461 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_probe [2018-11-22 22:21:18,461 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_probe [2018-11-22 22:21:18,461 INFO L130 BoogieDeclarations]: Found specification of procedure usb_make_path [2018-11-22 22:21:18,461 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_make_path [2018-11-22 22:21:18,461 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2018-11-22 22:21:18,462 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2018-11-22 22:21:18,462 INFO L130 BoogieDeclarations]: Found specification of procedure input_allocate_device [2018-11-22 22:21:18,462 INFO L138 BoogieDeclarations]: Found implementation of procedure input_allocate_device [2018-11-22 22:21:18,462 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register [2018-11-22 22:21:18,462 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_register [2018-11-22 22:21:18,462 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_exit [2018-11-22 22:21:18,462 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_exit [2018-11-22 22:21:18,462 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2018-11-22 22:21:18,462 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_disconnect [2018-11-22 22:21:18,462 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_disconnect [2018-11-22 22:21:18,463 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blast_assert [2018-11-22 22:21:18,463 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blast_assert [2018-11-22 22:21:18,463 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-22 22:21:18,463 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_int_urb [2018-11-22 22:21:18,463 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_int_urb [2018-11-22 22:21:18,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-22 22:21:18,463 INFO L130 BoogieDeclarations]: Found specification of procedure input_unregister_device [2018-11-22 22:21:18,463 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-22 22:21:18,463 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2018-11-22 22:21:18,463 INFO L130 BoogieDeclarations]: Found specification of procedure strlcat [2018-11-22 22:21:18,464 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-22 22:21:18,464 INFO L130 BoogieDeclarations]: Found specification of procedure usb_to_input_id [2018-11-22 22:21:18,464 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_to_input_id [2018-11-22 22:21:18,464 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2018-11-22 22:21:18,464 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2018-11-22 22:21:18,464 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_assume_stop [2018-11-22 22:21:18,464 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_assume_stop [2018-11-22 22:21:18,464 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2018-11-22 22:21:18,464 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2018-11-22 22:21:18,464 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2018-11-22 22:21:18,465 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2018-11-22 22:21:18,465 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_int_in [2018-11-22 22:21:18,465 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_int_in [2018-11-22 22:21:18,465 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value [2018-11-22 22:21:18,465 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2018-11-22 22:21:18,465 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2018-11-22 22:21:18,465 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undefined_pointer [2018-11-22 22:21:18,465 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-22 22:21:18,465 INFO L130 BoogieDeclarations]: Found specification of procedure input_set_drvdata [2018-11-22 22:21:18,466 INFO L138 BoogieDeclarations]: Found implementation of procedure input_set_drvdata [2018-11-22 22:21:18,466 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-22 22:21:18,466 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-22 22:21:18,466 INFO L130 BoogieDeclarations]: Found specification of procedure usb_maxpacket [2018-11-22 22:21:18,466 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_maxpacket [2018-11-22 22:21:18,466 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2018-11-22 22:21:18,466 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2018-11-22 22:21:18,466 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-22 22:21:18,466 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-22 22:21:18,467 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2018-11-22 22:21:18,467 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2018-11-22 22:21:18,467 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-22 22:21:18,467 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-22 22:21:18,467 INFO L130 BoogieDeclarations]: Found specification of procedure input_register_device [2018-11-22 22:21:18,688 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-22 22:21:18,688 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-22 22:21:19,241 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-22 22:21:19,241 INFO L280 CfgBuilder]: Removed 5 assue(true) statements. [2018-11-22 22:21:19,241 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:21:19 BoogieIcfgContainer [2018-11-22 22:21:19,241 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-22 22:21:19,242 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-22 22:21:19,242 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-22 22:21:19,244 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-22 22:21:19,244 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.11 10:21:17" (1/3) ... [2018-11-22 22:21:19,244 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7763d89f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 10:21:19, skipping insertion in model container [2018-11-22 22:21:19,244 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:18" (2/3) ... [2018-11-22 22:21:19,245 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7763d89f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 10:21:19, skipping insertion in model container [2018-11-22 22:21:19,245 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:21:19" (3/3) ... [2018-11-22 22:21:19,246 INFO L112 eAbstractionObserver]: Analyzing ICFG usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-22 22:21:19,252 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-22 22:21:19,258 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-22 22:21:19,268 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-22 22:21:19,293 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-22 22:21:19,293 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-22 22:21:19,293 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-22 22:21:19,294 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-22 22:21:19,294 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-22 22:21:19,294 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-22 22:21:19,294 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-22 22:21:19,294 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-22 22:21:19,295 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-22 22:21:19,313 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states. [2018-11-22 22:21:19,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-22 22:21:19,318 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:19,319 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:19,320 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:19,324 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:19,324 INFO L82 PathProgramCache]: Analyzing trace with hash -736875403, now seen corresponding path program 1 times [2018-11-22 22:21:19,325 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:19,326 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:19,365 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:19,365 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:19,365 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:19,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:19,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:21:19,596 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:19,597 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:21:19,599 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:21:19,607 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:21:19,608 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:21:19,609 INFO L87 Difference]: Start difference. First operand 220 states. Second operand 6 states. [2018-11-22 22:21:19,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:19,699 INFO L93 Difference]: Finished difference Result 426 states and 553 transitions. [2018-11-22 22:21:19,700 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-22 22:21:19,701 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 23 [2018-11-22 22:21:19,702 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:19,710 INFO L225 Difference]: With dead ends: 426 [2018-11-22 22:21:19,710 INFO L226 Difference]: Without dead ends: 212 [2018-11-22 22:21:19,714 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-22 22:21:19,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2018-11-22 22:21:19,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 211. [2018-11-22 22:21:19,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 211 states. [2018-11-22 22:21:19,755 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 253 transitions. [2018-11-22 22:21:19,757 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 253 transitions. Word has length 23 [2018-11-22 22:21:19,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:19,757 INFO L480 AbstractCegarLoop]: Abstraction has 211 states and 253 transitions. [2018-11-22 22:21:19,758 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:21:19,758 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 253 transitions. [2018-11-22 22:21:19,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-22 22:21:19,758 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:19,759 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:19,759 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:19,759 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:19,759 INFO L82 PathProgramCache]: Analyzing trace with hash -1129902413, now seen corresponding path program 1 times [2018-11-22 22:21:19,759 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:19,759 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:19,764 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:19,764 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:19,764 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:19,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:19,842 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:21:19,842 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:19,842 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:21:19,843 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:21:19,844 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:21:19,844 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:19,844 INFO L87 Difference]: Start difference. First operand 211 states and 253 transitions. Second operand 3 states. [2018-11-22 22:21:19,897 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:19,897 INFO L93 Difference]: Finished difference Result 581 states and 709 transitions. [2018-11-22 22:21:19,898 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:21:19,898 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 23 [2018-11-22 22:21:19,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:19,902 INFO L225 Difference]: With dead ends: 581 [2018-11-22 22:21:19,902 INFO L226 Difference]: Without dead ends: 394 [2018-11-22 22:21:19,904 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:19,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 394 states. [2018-11-22 22:21:19,932 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 394 to 390. [2018-11-22 22:21:19,932 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 390 states. [2018-11-22 22:21:19,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 473 transitions. [2018-11-22 22:21:19,935 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 473 transitions. Word has length 23 [2018-11-22 22:21:19,935 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:19,936 INFO L480 AbstractCegarLoop]: Abstraction has 390 states and 473 transitions. [2018-11-22 22:21:19,936 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:21:19,936 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 473 transitions. [2018-11-22 22:21:19,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2018-11-22 22:21:19,936 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:19,938 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:19,938 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:19,938 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:19,938 INFO L82 PathProgramCache]: Analyzing trace with hash -667381066, now seen corresponding path program 1 times [2018-11-22 22:21:19,938 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:19,938 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:19,941 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:19,941 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:19,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:19,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:19,991 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:21:19,991 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:19,992 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:21:19,992 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:21:19,992 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:21:19,992 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:19,993 INFO L87 Difference]: Start difference. First operand 390 states and 473 transitions. Second operand 3 states. [2018-11-22 22:21:20,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:20,040 INFO L93 Difference]: Finished difference Result 1119 states and 1378 transitions. [2018-11-22 22:21:20,040 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:21:20,040 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2018-11-22 22:21:20,041 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:20,044 INFO L225 Difference]: With dead ends: 1119 [2018-11-22 22:21:20,044 INFO L226 Difference]: Without dead ends: 746 [2018-11-22 22:21:20,046 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:20,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 746 states. [2018-11-22 22:21:20,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 746 to 734. [2018-11-22 22:21:20,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 734 states. [2018-11-22 22:21:20,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 734 states to 734 states and 898 transitions. [2018-11-22 22:21:20,081 INFO L78 Accepts]: Start accepts. Automaton has 734 states and 898 transitions. Word has length 24 [2018-11-22 22:21:20,082 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:20,082 INFO L480 AbstractCegarLoop]: Abstraction has 734 states and 898 transitions. [2018-11-22 22:21:20,082 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:21:20,082 INFO L276 IsEmpty]: Start isEmpty. Operand 734 states and 898 transitions. [2018-11-22 22:21:20,083 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-22 22:21:20,083 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:20,083 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:20,084 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:20,084 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:20,084 INFO L82 PathProgramCache]: Analyzing trace with hash 1883917988, now seen corresponding path program 1 times [2018-11-22 22:21:20,084 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:20,084 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:20,086 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,086 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:20,087 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:20,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:21:20,168 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:20,168 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:20,168 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:20,168 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:20,169 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:20,169 INFO L87 Difference]: Start difference. First operand 734 states and 898 transitions. Second operand 5 states. [2018-11-22 22:21:20,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:20,307 INFO L93 Difference]: Finished difference Result 1567 states and 1957 transitions. [2018-11-22 22:21:20,308 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-22 22:21:20,308 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 46 [2018-11-22 22:21:20,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:20,312 INFO L225 Difference]: With dead ends: 1567 [2018-11-22 22:21:20,312 INFO L226 Difference]: Without dead ends: 850 [2018-11-22 22:21:20,314 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2018-11-22 22:21:20,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 850 states. [2018-11-22 22:21:20,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 850 to 805. [2018-11-22 22:21:20,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 805 states. [2018-11-22 22:21:20,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 805 states to 805 states and 999 transitions. [2018-11-22 22:21:20,354 INFO L78 Accepts]: Start accepts. Automaton has 805 states and 999 transitions. Word has length 46 [2018-11-22 22:21:20,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:20,354 INFO L480 AbstractCegarLoop]: Abstraction has 805 states and 999 transitions. [2018-11-22 22:21:20,354 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:20,355 INFO L276 IsEmpty]: Start isEmpty. Operand 805 states and 999 transitions. [2018-11-22 22:21:20,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-22 22:21:20,356 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:20,356 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:20,357 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:20,357 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:20,357 INFO L82 PathProgramCache]: Analyzing trace with hash 1208995629, now seen corresponding path program 1 times [2018-11-22 22:21:20,357 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:20,357 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:20,360 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,360 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:20,360 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:20,455 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:21:20,455 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:20,455 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:20,455 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:20,456 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:20,456 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:20,456 INFO L87 Difference]: Start difference. First operand 805 states and 999 transitions. Second operand 5 states. [2018-11-22 22:21:20,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:20,522 INFO L93 Difference]: Finished difference Result 1630 states and 2020 transitions. [2018-11-22 22:21:20,522 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:20,522 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 64 [2018-11-22 22:21:20,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:20,525 INFO L225 Difference]: With dead ends: 1630 [2018-11-22 22:21:20,525 INFO L226 Difference]: Without dead ends: 840 [2018-11-22 22:21:20,526 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:20,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 840 states. [2018-11-22 22:21:20,546 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 840 to 817. [2018-11-22 22:21:20,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 817 states. [2018-11-22 22:21:20,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 817 states to 817 states and 1009 transitions. [2018-11-22 22:21:20,549 INFO L78 Accepts]: Start accepts. Automaton has 817 states and 1009 transitions. Word has length 64 [2018-11-22 22:21:20,549 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:20,549 INFO L480 AbstractCegarLoop]: Abstraction has 817 states and 1009 transitions. [2018-11-22 22:21:20,549 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:20,549 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 1009 transitions. [2018-11-22 22:21:20,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2018-11-22 22:21:20,551 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:20,552 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:20,552 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:20,552 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:20,552 INFO L82 PathProgramCache]: Analyzing trace with hash -335293934, now seen corresponding path program 1 times [2018-11-22 22:21:20,552 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:20,552 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:20,556 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,557 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:20,557 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:20,638 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:20,639 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:20,639 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:21:20,639 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:21:20,639 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:21:20,639 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:21:20,640 INFO L87 Difference]: Start difference. First operand 817 states and 1009 transitions. Second operand 6 states. [2018-11-22 22:21:20,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:20,686 INFO L93 Difference]: Finished difference Result 1641 states and 2036 transitions. [2018-11-22 22:21:20,687 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-22 22:21:20,687 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 110 [2018-11-22 22:21:20,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:20,689 INFO L225 Difference]: With dead ends: 1641 [2018-11-22 22:21:20,689 INFO L226 Difference]: Without dead ends: 838 [2018-11-22 22:21:20,691 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-22 22:21:20,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 838 states. [2018-11-22 22:21:20,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 838 to 832. [2018-11-22 22:21:20,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 832 states. [2018-11-22 22:21:20,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 832 states to 832 states and 1022 transitions. [2018-11-22 22:21:20,711 INFO L78 Accepts]: Start accepts. Automaton has 832 states and 1022 transitions. Word has length 110 [2018-11-22 22:21:20,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:20,712 INFO L480 AbstractCegarLoop]: Abstraction has 832 states and 1022 transitions. [2018-11-22 22:21:20,712 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:21:20,712 INFO L276 IsEmpty]: Start isEmpty. Operand 832 states and 1022 transitions. [2018-11-22 22:21:20,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2018-11-22 22:21:20,714 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:20,714 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:20,715 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:20,715 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:20,715 INFO L82 PathProgramCache]: Analyzing trace with hash -589922631, now seen corresponding path program 1 times [2018-11-22 22:21:20,715 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:20,715 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:20,717 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,717 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:20,717 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:20,808 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:20,809 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:20,809 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:20,809 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:20,809 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:20,810 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:20,810 INFO L87 Difference]: Start difference. First operand 832 states and 1022 transitions. Second operand 5 states. [2018-11-22 22:21:20,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:20,838 INFO L93 Difference]: Finished difference Result 1260 states and 1553 transitions. [2018-11-22 22:21:20,838 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:20,838 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 116 [2018-11-22 22:21:20,839 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:20,841 INFO L225 Difference]: With dead ends: 1260 [2018-11-22 22:21:20,841 INFO L226 Difference]: Without dead ends: 840 [2018-11-22 22:21:20,842 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:20,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 840 states. [2018-11-22 22:21:20,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 840 to 840. [2018-11-22 22:21:20,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 840 states. [2018-11-22 22:21:20,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 840 states to 840 states and 1030 transitions. [2018-11-22 22:21:20,860 INFO L78 Accepts]: Start accepts. Automaton has 840 states and 1030 transitions. Word has length 116 [2018-11-22 22:21:20,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:20,860 INFO L480 AbstractCegarLoop]: Abstraction has 840 states and 1030 transitions. [2018-11-22 22:21:20,860 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:20,860 INFO L276 IsEmpty]: Start isEmpty. Operand 840 states and 1030 transitions. [2018-11-22 22:21:20,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2018-11-22 22:21:20,862 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:20,862 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:20,863 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:20,863 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:20,863 INFO L82 PathProgramCache]: Analyzing trace with hash -995031749, now seen corresponding path program 1 times [2018-11-22 22:21:20,863 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:20,863 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:20,865 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,865 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:20,865 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:20,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:20,960 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:20,960 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:20,960 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:20,960 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:20,961 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:20,961 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:20,961 INFO L87 Difference]: Start difference. First operand 840 states and 1030 transitions. Second operand 5 states. [2018-11-22 22:21:20,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:20,992 INFO L93 Difference]: Finished difference Result 1404 states and 1723 transitions. [2018-11-22 22:21:20,993 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:20,993 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 120 [2018-11-22 22:21:20,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:20,995 INFO L225 Difference]: With dead ends: 1404 [2018-11-22 22:21:20,996 INFO L226 Difference]: Without dead ends: 583 [2018-11-22 22:21:20,998 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:20,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 583 states. [2018-11-22 22:21:21,009 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 583 to 583. [2018-11-22 22:21:21,009 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 583 states. [2018-11-22 22:21:21,011 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 583 states to 583 states and 705 transitions. [2018-11-22 22:21:21,011 INFO L78 Accepts]: Start accepts. Automaton has 583 states and 705 transitions. Word has length 120 [2018-11-22 22:21:21,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:21,012 INFO L480 AbstractCegarLoop]: Abstraction has 583 states and 705 transitions. [2018-11-22 22:21:21,012 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:21,012 INFO L276 IsEmpty]: Start isEmpty. Operand 583 states and 705 transitions. [2018-11-22 22:21:21,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2018-11-22 22:21:21,013 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:21,013 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:21,014 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:21,014 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:21,014 INFO L82 PathProgramCache]: Analyzing trace with hash 249732732, now seen corresponding path program 1 times [2018-11-22 22:21:21,014 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:21,014 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:21,016 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:21,016 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:21,016 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:21,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:21,120 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:21,120 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:21,121 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:21:21,121 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:21:21,121 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:21:21,121 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:21:21,121 INFO L87 Difference]: Start difference. First operand 583 states and 705 transitions. Second operand 6 states. [2018-11-22 22:21:21,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:21,821 INFO L93 Difference]: Finished difference Result 1044 states and 1272 transitions. [2018-11-22 22:21:21,822 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-22 22:21:21,822 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 120 [2018-11-22 22:21:21,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:21,827 INFO L225 Difference]: With dead ends: 1044 [2018-11-22 22:21:21,827 INFO L226 Difference]: Without dead ends: 1041 [2018-11-22 22:21:21,827 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2018-11-22 22:21:21,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1041 states. [2018-11-22 22:21:21,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1041 to 1007. [2018-11-22 22:21:21,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1007 states. [2018-11-22 22:21:21,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1007 states to 1007 states and 1236 transitions. [2018-11-22 22:21:21,874 INFO L78 Accepts]: Start accepts. Automaton has 1007 states and 1236 transitions. Word has length 120 [2018-11-22 22:21:21,875 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:21,875 INFO L480 AbstractCegarLoop]: Abstraction has 1007 states and 1236 transitions. [2018-11-22 22:21:21,875 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:21:21,875 INFO L276 IsEmpty]: Start isEmpty. Operand 1007 states and 1236 transitions. [2018-11-22 22:21:21,876 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2018-11-22 22:21:21,876 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:21,876 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:21,877 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:21,877 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:21,877 INFO L82 PathProgramCache]: Analyzing trace with hash 1326644216, now seen corresponding path program 1 times [2018-11-22 22:21:21,877 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:21,877 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:21,879 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:21,879 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:21,879 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:21,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:21,985 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:21,985 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:21,985 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:21:21,985 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:21:21,986 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:21:21,986 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:21:21,986 INFO L87 Difference]: Start difference. First operand 1007 states and 1236 transitions. Second operand 6 states. [2018-11-22 22:21:22,085 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:22,085 INFO L93 Difference]: Finished difference Result 1994 states and 2459 transitions. [2018-11-22 22:21:22,086 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-22 22:21:22,086 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 124 [2018-11-22 22:21:22,086 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:22,090 INFO L225 Difference]: With dead ends: 1994 [2018-11-22 22:21:22,090 INFO L226 Difference]: Without dead ends: 997 [2018-11-22 22:21:22,092 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-22 22:21:22,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 997 states. [2018-11-22 22:21:22,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 997 to 964. [2018-11-22 22:21:22,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 964 states. [2018-11-22 22:21:22,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 964 states to 964 states and 1194 transitions. [2018-11-22 22:21:22,132 INFO L78 Accepts]: Start accepts. Automaton has 964 states and 1194 transitions. Word has length 124 [2018-11-22 22:21:22,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:22,132 INFO L480 AbstractCegarLoop]: Abstraction has 964 states and 1194 transitions. [2018-11-22 22:21:22,132 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:21:22,132 INFO L276 IsEmpty]: Start isEmpty. Operand 964 states and 1194 transitions. [2018-11-22 22:21:22,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-22 22:21:22,134 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:22,134 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:22,134 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:22,134 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:22,134 INFO L82 PathProgramCache]: Analyzing trace with hash 2132993389, now seen corresponding path program 1 times [2018-11-22 22:21:22,134 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:22,134 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:22,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:22,136 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:22,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:22,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:22,212 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:22,213 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:22,213 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:21:22,213 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:21:22,213 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:21:22,213 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:22,213 INFO L87 Difference]: Start difference. First operand 964 states and 1194 transitions. Second operand 3 states. [2018-11-22 22:21:22,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:22,253 INFO L93 Difference]: Finished difference Result 1810 states and 2274 transitions. [2018-11-22 22:21:22,253 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:21:22,254 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 133 [2018-11-22 22:21:22,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:22,257 INFO L225 Difference]: With dead ends: 1810 [2018-11-22 22:21:22,257 INFO L226 Difference]: Without dead ends: 940 [2018-11-22 22:21:22,259 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:22,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 940 states. [2018-11-22 22:21:22,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 940 to 940. [2018-11-22 22:21:22,294 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 940 states. [2018-11-22 22:21:22,297 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 940 states to 940 states and 1155 transitions. [2018-11-22 22:21:22,298 INFO L78 Accepts]: Start accepts. Automaton has 940 states and 1155 transitions. Word has length 133 [2018-11-22 22:21:22,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:22,298 INFO L480 AbstractCegarLoop]: Abstraction has 940 states and 1155 transitions. [2018-11-22 22:21:22,298 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:21:22,298 INFO L276 IsEmpty]: Start isEmpty. Operand 940 states and 1155 transitions. [2018-11-22 22:21:22,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2018-11-22 22:21:22,299 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:22,299 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:22,300 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:22,300 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:22,300 INFO L82 PathProgramCache]: Analyzing trace with hash 1289599528, now seen corresponding path program 1 times [2018-11-22 22:21:22,300 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:22,300 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:22,302 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:22,302 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:22,302 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:22,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:22,392 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:22,392 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:22,392 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:22,392 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:22,393 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:22,393 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:22,393 INFO L87 Difference]: Start difference. First operand 940 states and 1155 transitions. Second operand 5 states. [2018-11-22 22:21:22,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:22,435 INFO L93 Difference]: Finished difference Result 983 states and 1203 transitions. [2018-11-22 22:21:22,436 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:22,437 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 135 [2018-11-22 22:21:22,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:22,440 INFO L225 Difference]: With dead ends: 983 [2018-11-22 22:21:22,440 INFO L226 Difference]: Without dead ends: 948 [2018-11-22 22:21:22,442 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:22,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 948 states. [2018-11-22 22:21:22,480 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 948 to 948. [2018-11-22 22:21:22,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 948 states. [2018-11-22 22:21:22,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 948 states to 948 states and 1160 transitions. [2018-11-22 22:21:22,484 INFO L78 Accepts]: Start accepts. Automaton has 948 states and 1160 transitions. Word has length 135 [2018-11-22 22:21:22,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:22,484 INFO L480 AbstractCegarLoop]: Abstraction has 948 states and 1160 transitions. [2018-11-22 22:21:22,485 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:22,485 INFO L276 IsEmpty]: Start isEmpty. Operand 948 states and 1160 transitions. [2018-11-22 22:21:22,486 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2018-11-22 22:21:22,486 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:22,486 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:22,486 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:22,486 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:22,487 INFO L82 PathProgramCache]: Analyzing trace with hash 1311418946, now seen corresponding path program 1 times [2018-11-22 22:21:22,487 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:22,487 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:22,488 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:22,488 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:22,489 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:22,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:22,695 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:22,695 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:22,695 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-22 22:21:22,696 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-22 22:21:22,696 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-22 22:21:22,696 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2018-11-22 22:21:22,696 INFO L87 Difference]: Start difference. First operand 948 states and 1160 transitions. Second operand 8 states. [2018-11-22 22:21:23,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:23,676 INFO L93 Difference]: Finished difference Result 1987 states and 2552 transitions. [2018-11-22 22:21:23,677 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-22 22:21:23,677 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 136 [2018-11-22 22:21:23,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:23,683 INFO L225 Difference]: With dead ends: 1987 [2018-11-22 22:21:23,683 INFO L226 Difference]: Without dead ends: 1511 [2018-11-22 22:21:23,685 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 2 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=106, Unknown=0, NotChecked=0, Total=156 [2018-11-22 22:21:23,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1511 states. [2018-11-22 22:21:23,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1511 to 1216. [2018-11-22 22:21:23,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1216 states. [2018-11-22 22:21:23,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1216 states to 1216 states and 1486 transitions. [2018-11-22 22:21:23,741 INFO L78 Accepts]: Start accepts. Automaton has 1216 states and 1486 transitions. Word has length 136 [2018-11-22 22:21:23,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:23,741 INFO L480 AbstractCegarLoop]: Abstraction has 1216 states and 1486 transitions. [2018-11-22 22:21:23,741 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-22 22:21:23,741 INFO L276 IsEmpty]: Start isEmpty. Operand 1216 states and 1486 transitions. [2018-11-22 22:21:23,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 153 [2018-11-22 22:21:23,743 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:23,743 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:23,743 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:23,743 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:23,743 INFO L82 PathProgramCache]: Analyzing trace with hash 1870756101, now seen corresponding path program 1 times [2018-11-22 22:21:23,743 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:23,744 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:23,745 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:23,745 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:23,745 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:23,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:23,881 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:23,882 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:23,882 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:23,882 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:23,882 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:23,882 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:23,883 INFO L87 Difference]: Start difference. First operand 1216 states and 1486 transitions. Second operand 5 states. [2018-11-22 22:21:23,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:23,914 INFO L93 Difference]: Finished difference Result 1828 states and 2237 transitions. [2018-11-22 22:21:23,915 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:23,915 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 152 [2018-11-22 22:21:23,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:23,917 INFO L225 Difference]: With dead ends: 1828 [2018-11-22 22:21:23,917 INFO L226 Difference]: Without dead ends: 688 [2018-11-22 22:21:23,919 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:23,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 688 states. [2018-11-22 22:21:23,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 688 to 688. [2018-11-22 22:21:23,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 688 states. [2018-11-22 22:21:23,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 688 states to 688 states and 829 transitions. [2018-11-22 22:21:23,939 INFO L78 Accepts]: Start accepts. Automaton has 688 states and 829 transitions. Word has length 152 [2018-11-22 22:21:23,939 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:23,939 INFO L480 AbstractCegarLoop]: Abstraction has 688 states and 829 transitions. [2018-11-22 22:21:23,939 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:23,939 INFO L276 IsEmpty]: Start isEmpty. Operand 688 states and 829 transitions. [2018-11-22 22:21:23,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 153 [2018-11-22 22:21:23,940 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:23,940 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:23,941 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:23,941 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:23,941 INFO L82 PathProgramCache]: Analyzing trace with hash 687408804, now seen corresponding path program 1 times [2018-11-22 22:21:23,941 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:23,941 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:23,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:23,942 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:23,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:23,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:24,049 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:24,049 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:24,049 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:21:24,050 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:21:24,050 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:21:24,050 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:21:24,050 INFO L87 Difference]: Start difference. First operand 688 states and 829 transitions. Second operand 6 states. [2018-11-22 22:21:24,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:24,614 INFO L93 Difference]: Finished difference Result 1106 states and 1341 transitions. [2018-11-22 22:21:24,614 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-22 22:21:24,615 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 152 [2018-11-22 22:21:24,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:24,618 INFO L225 Difference]: With dead ends: 1106 [2018-11-22 22:21:24,618 INFO L226 Difference]: Without dead ends: 1101 [2018-11-22 22:21:24,619 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2018-11-22 22:21:24,620 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2018-11-22 22:21:24,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 1062. [2018-11-22 22:21:24,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1062 states. [2018-11-22 22:21:24,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1062 states to 1062 states and 1296 transitions. [2018-11-22 22:21:24,659 INFO L78 Accepts]: Start accepts. Automaton has 1062 states and 1296 transitions. Word has length 152 [2018-11-22 22:21:24,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:24,659 INFO L480 AbstractCegarLoop]: Abstraction has 1062 states and 1296 transitions. [2018-11-22 22:21:24,659 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:21:24,659 INFO L276 IsEmpty]: Start isEmpty. Operand 1062 states and 1296 transitions. [2018-11-22 22:21:24,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 161 [2018-11-22 22:21:24,661 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:24,661 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:24,661 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:24,661 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:24,661 INFO L82 PathProgramCache]: Analyzing trace with hash -1237359020, now seen corresponding path program 1 times [2018-11-22 22:21:24,661 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:24,661 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:24,663 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:24,663 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:24,663 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:24,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:24,734 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:24,734 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:24,734 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:24,735 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:24,735 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:24,735 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:24,735 INFO L87 Difference]: Start difference. First operand 1062 states and 1296 transitions. Second operand 5 states. [2018-11-22 22:21:24,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:24,786 INFO L93 Difference]: Finished difference Result 1100 states and 1336 transitions. [2018-11-22 22:21:24,787 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:24,787 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 160 [2018-11-22 22:21:24,788 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:24,790 INFO L225 Difference]: With dead ends: 1100 [2018-11-22 22:21:24,790 INFO L226 Difference]: Without dead ends: 1083 [2018-11-22 22:21:24,791 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-22 22:21:24,792 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1083 states. [2018-11-22 22:21:24,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1083 to 1066. [2018-11-22 22:21:24,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1066 states. [2018-11-22 22:21:24,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1066 states to 1066 states and 1299 transitions. [2018-11-22 22:21:24,827 INFO L78 Accepts]: Start accepts. Automaton has 1066 states and 1299 transitions. Word has length 160 [2018-11-22 22:21:24,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:24,827 INFO L480 AbstractCegarLoop]: Abstraction has 1066 states and 1299 transitions. [2018-11-22 22:21:24,827 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:24,827 INFO L276 IsEmpty]: Start isEmpty. Operand 1066 states and 1299 transitions. [2018-11-22 22:21:24,829 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 165 [2018-11-22 22:21:24,829 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:24,829 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:24,829 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:24,829 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:24,829 INFO L82 PathProgramCache]: Analyzing trace with hash 711197501, now seen corresponding path program 1 times [2018-11-22 22:21:24,829 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:24,829 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:24,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:24,831 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:24,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:24,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:24,899 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:24,899 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-22 22:21:24,899 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-22 22:21:24,914 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:25,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:25,065 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:21:25,146 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:25,174 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-22 22:21:25,174 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 5 [2018-11-22 22:21:25,174 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:25,174 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:25,175 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:25,175 INFO L87 Difference]: Start difference. First operand 1066 states and 1299 transitions. Second operand 5 states. [2018-11-22 22:21:25,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:25,283 INFO L93 Difference]: Finished difference Result 2029 states and 2483 transitions. [2018-11-22 22:21:25,284 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-22 22:21:25,285 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 164 [2018-11-22 22:21:25,285 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:25,289 INFO L225 Difference]: With dead ends: 2029 [2018-11-22 22:21:25,290 INFO L226 Difference]: Without dead ends: 1021 [2018-11-22 22:21:25,292 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 164 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:25,293 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1021 states. [2018-11-22 22:21:25,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1021 to 1021. [2018-11-22 22:21:25,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1021 states. [2018-11-22 22:21:25,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1021 states to 1021 states and 1214 transitions. [2018-11-22 22:21:25,353 INFO L78 Accepts]: Start accepts. Automaton has 1021 states and 1214 transitions. Word has length 164 [2018-11-22 22:21:25,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:25,354 INFO L480 AbstractCegarLoop]: Abstraction has 1021 states and 1214 transitions. [2018-11-22 22:21:25,354 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:25,354 INFO L276 IsEmpty]: Start isEmpty. Operand 1021 states and 1214 transitions. [2018-11-22 22:21:25,355 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 177 [2018-11-22 22:21:25,356 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:25,356 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:25,356 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:25,356 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:25,356 INFO L82 PathProgramCache]: Analyzing trace with hash -348337541, now seen corresponding path program 1 times [2018-11-22 22:21:25,356 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:25,357 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:25,358 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:25,359 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:25,359 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:25,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:25,480 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:25,480 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:25,481 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:21:25,482 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:21:25,482 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:21:25,482 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:25,482 INFO L87 Difference]: Start difference. First operand 1021 states and 1214 transitions. Second operand 3 states. [2018-11-22 22:21:25,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:25,536 INFO L93 Difference]: Finished difference Result 1402 states and 1663 transitions. [2018-11-22 22:21:25,537 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:21:25,537 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 176 [2018-11-22 22:21:25,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:25,540 INFO L225 Difference]: With dead ends: 1402 [2018-11-22 22:21:25,540 INFO L226 Difference]: Without dead ends: 678 [2018-11-22 22:21:25,542 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:25,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 678 states. [2018-11-22 22:21:25,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 678 to 675. [2018-11-22 22:21:25,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 675 states. [2018-11-22 22:21:25,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 675 states to 675 states and 784 transitions. [2018-11-22 22:21:25,589 INFO L78 Accepts]: Start accepts. Automaton has 675 states and 784 transitions. Word has length 176 [2018-11-22 22:21:25,589 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:25,589 INFO L480 AbstractCegarLoop]: Abstraction has 675 states and 784 transitions. [2018-11-22 22:21:25,589 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:21:25,589 INFO L276 IsEmpty]: Start isEmpty. Operand 675 states and 784 transitions. [2018-11-22 22:21:25,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2018-11-22 22:21:25,591 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:25,591 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:25,591 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:25,592 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:25,592 INFO L82 PathProgramCache]: Analyzing trace with hash -1682650176, now seen corresponding path program 1 times [2018-11-22 22:21:25,592 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:25,592 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:25,598 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:25,598 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:25,598 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:25,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:25,785 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:25,785 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:25,785 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:25,786 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:25,786 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:25,786 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:25,786 INFO L87 Difference]: Start difference. First operand 675 states and 784 transitions. Second operand 5 states. [2018-11-22 22:21:25,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:25,843 INFO L93 Difference]: Finished difference Result 1386 states and 1661 transitions. [2018-11-22 22:21:25,844 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:25,844 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 178 [2018-11-22 22:21:25,844 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:25,847 INFO L225 Difference]: With dead ends: 1386 [2018-11-22 22:21:25,847 INFO L226 Difference]: Without dead ends: 814 [2018-11-22 22:21:25,849 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:25,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 814 states. [2018-11-22 22:21:25,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 814 to 756. [2018-11-22 22:21:25,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 756 states. [2018-11-22 22:21:25,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 756 states to 756 states and 905 transitions. [2018-11-22 22:21:25,899 INFO L78 Accepts]: Start accepts. Automaton has 756 states and 905 transitions. Word has length 178 [2018-11-22 22:21:25,900 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:25,900 INFO L480 AbstractCegarLoop]: Abstraction has 756 states and 905 transitions. [2018-11-22 22:21:25,900 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:25,900 INFO L276 IsEmpty]: Start isEmpty. Operand 756 states and 905 transitions. [2018-11-22 22:21:25,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2018-11-22 22:21:25,902 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:25,902 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:25,902 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:25,902 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:25,902 INFO L82 PathProgramCache]: Analyzing trace with hash -789163838, now seen corresponding path program 1 times [2018-11-22 22:21:25,902 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:25,903 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:25,904 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:25,904 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:25,904 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:25,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:26,211 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:26,211 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:26,211 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-22 22:21:26,212 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-22 22:21:26,212 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-22 22:21:26,212 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2018-11-22 22:21:26,212 INFO L87 Difference]: Start difference. First operand 756 states and 905 transitions. Second operand 8 states. [2018-11-22 22:21:27,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:27,540 INFO L93 Difference]: Finished difference Result 920 states and 1120 transitions. [2018-11-22 22:21:27,541 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-22 22:21:27,541 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 178 [2018-11-22 22:21:27,542 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:27,546 INFO L225 Difference]: With dead ends: 920 [2018-11-22 22:21:27,546 INFO L226 Difference]: Without dead ends: 873 [2018-11-22 22:21:27,547 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 2 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=50, Invalid=106, Unknown=0, NotChecked=0, Total=156 [2018-11-22 22:21:27,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 873 states. [2018-11-22 22:21:27,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 873 to 752. [2018-11-22 22:21:27,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 752 states. [2018-11-22 22:21:27,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 752 states to 752 states and 889 transitions. [2018-11-22 22:21:27,605 INFO L78 Accepts]: Start accepts. Automaton has 752 states and 889 transitions. Word has length 178 [2018-11-22 22:21:27,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:27,606 INFO L480 AbstractCegarLoop]: Abstraction has 752 states and 889 transitions. [2018-11-22 22:21:27,606 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-22 22:21:27,606 INFO L276 IsEmpty]: Start isEmpty. Operand 752 states and 889 transitions. [2018-11-22 22:21:27,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2018-11-22 22:21:27,608 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:27,608 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:27,609 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:27,609 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:27,609 INFO L82 PathProgramCache]: Analyzing trace with hash -2094583502, now seen corresponding path program 1 times [2018-11-22 22:21:27,609 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:21:27,609 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:21:27,611 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:27,612 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:27,612 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:21:28,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:21:28,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:21:28,303 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=4294967320, |#NULL.offset|=4294967400, |#t~string100.base|=4294967367, |#t~string100.offset|=4294967349, |#t~string124.base|=4294967303, |#t~string124.offset|=4294967358, |#t~string127.base|=4294967357, |#t~string127.offset|=4294967323, |#t~string17.base|=4294967399, |#t~string17.offset|=4294967365, |#t~string23.base|=4294967325, |#t~string23.offset|=4294967311, |#t~string29.base|=4294967322, |#t~string29.offset|=4294967352, |#t~string31.base|=4294967406, |#t~string31.offset|=4294967383, |#t~string59.base|=4294967308, |#t~string59.offset|=4294967360, |#t~string90.base|=4294967309, |#t~string90.offset|=4294967370, |#t~string96.base|=4294967314, |#t~string96.offset|=4294967369, |old(#NULL.base)|=4294967320, |old(#NULL.offset)|=4294967400, |old(#t~string100.base)|=4294967367, |old(#t~string100.offset)|=4294967349, |old(#t~string124.base)|=4294967303, |old(#t~string124.offset)|=4294967358, |old(#t~string127.base)|=4294967357, |old(#t~string127.offset)|=4294967323, |old(#t~string17.base)|=4294967399, |old(#t~string17.offset)|=4294967365, |old(#t~string23.base)|=4294967325, |old(#t~string23.offset)|=4294967311, |old(#t~string29.base)|=4294967322, |old(#t~string29.offset)|=4294967352, |old(#t~string31.base)|=4294967406, |old(#t~string31.offset)|=4294967383, |old(#t~string59.base)|=4294967308, |old(#t~string59.offset)|=4294967360, |old(#t~string90.base)|=4294967309, |old(#t~string90.offset)|=4294967370, |old(#t~string96.base)|=4294967314, |old(#t~string96.offset)|=4294967369, |old(~#usb_mouse_driver~0.base)|=4294967387, |old(~#usb_mouse_driver~0.offset)|=4294967347, |old(~#usb_mouse_id_table~0.base)|=4294967306, |old(~#usb_mouse_id_table~0.offset)|=4294967317, |old(~ldv_coherent_state~0)|=4294967300, |old(~LDV_IN_INTERRUPT~0)|=4294967315, |old(~ldv_urb_state~0)|=4294967351, |old(~res_usb_mouse_probe_3~0)|=4294967404, |~#usb_mouse_driver~0.base|=4294967387, |~#usb_mouse_driver~0.offset|=4294967347, |~#usb_mouse_id_table~0.base|=4294967306, |~#usb_mouse_id_table~0.offset|=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string17.base, #t~string17.offset := #Ultimate.alloc(10);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(20);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(20);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(59);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(2);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 1 + #t~string90.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(26);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(8);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(9);call #t~string127.base, #t~string127.offset := #Ultimate.alloc(54);~__mod_author48~0 := ~__mod_author48~0[0 := 97];~__mod_author48~0 := ~__mod_author48~0[1 := 117];~__mod_author48~0 := ~__mod_author48~0[2 := 116];~__mod_author48~0 := ~__mod_author48~0[3 := 104];~__mod_author48~0 := ~__mod_author48~0[4 := 111];~__mod_author48~0 := ~__mod_author48~0[5 := 114];~__mod_author48~0 := ~__mod_author48~0[6 := 61];~__mod_author48~0 := ~__mod_author48~0[7 := 86];~__mod_author48~0 := ~__mod_author48~0[8 := 111];~__mod_author48~0 := ~__mod_author48~0[9 := 106];~__mod_author48~0 := ~__mod_author48~0[10 := 116];~__mod_author48~0 := ~__mod_author48~0[11 := 101];~__mod_author48~0 := ~__mod_author48~0[12 := 99];~__mod_author48~0 := ~__mod_author48~0[13 := 104];~__mod_author48~0 := ~__mod_author48~0[14 := 32];~__mod_author48~0 := ~__mod_author48~0[15 := 80];~__mod_author48~0 := ~__mod_author48~0[16 := 97];~__mod_author48~0 := ~__mod_author48~0[17 := 118];~__mod_author48~0 := ~__mod_author48~0[18 := 108];~__mod_author48~0 := ~__mod_author48~0[19 := 105];~__mod_author48~0 := ~__mod_author48~0[20 := 107];~__mod_author48~0 := ~__mod_author48~0[21 := 32];~__mod_author48~0 := ~__mod_author48~0[22 := 60];~__mod_author48~0 := ~__mod_author48~0[23 := 118];~__mod_author48~0 := ~__mod_author48~0[24 := 111];~__mod_author48~0 := ~__mod_author48~0[25 := 106];~__mod_author48~0 := ~__mod_author48~0[26 := 116];~__mod_author48~0 := ~__mod_author48~0[27 := 101];~__mod_author48~0 := ~__mod_author48~0[28 := 99];~__mod_author48~0 := ~__mod_author48~0[29 := 104];~__mod_author48~0 := ~__mod_author48~0[30 := 64];~__mod_author48~0 := ~__mod_author48~0[31 := 117];~__mod_author48~0 := ~__mod_author48~0[32 := 99];~__mod_author48~0 := ~__mod_author48~0[33 := 119];~__mod_author48~0 := ~__mod_author48~0[34 := 46];~__mod_author48~0 := ~__mod_author48~0[35 := 99];~__mod_author48~0 := ~__mod_author48~0[36 := 122];~__mod_author48~0 := ~__mod_author48~0[37 := 62];~__mod_author48~0 := ~__mod_author48~0[38 := 0];~__mod_description49~0 := ~__mod_description49~0[0 := 100];~__mod_description49~0 := ~__mod_description49~0[1 := 101];~__mod_description49~0 := ~__mod_description49~0[2 := 115];~__mod_description49~0 := ~__mod_description49~0[3 := 99];~__mod_description49~0 := ~__mod_description49~0[4 := 114];~__mod_description49~0 := ~__mod_description49~0[5 := 105];~__mod_description49~0 := ~__mod_description49~0[6 := 112];~__mod_description49~0 := ~__mod_description49~0[7 := 116];~__mod_description49~0 := ~__mod_description49~0[8 := 105];~__mod_description49~0 := ~__mod_description49~0[9 := 111];~__mod_description49~0 := ~__mod_description49~0[10 := 110];~__mod_description49~0 := ~__mod_description49~0[11 := 61];~__mod_description49~0 := ~__mod_description49~0[12 := 85];~__mod_description49~0 := ~__mod_description49~0[13 := 83];~__mod_description49~0 := ~__mod_description49~0[14 := 66];~__mod_description49~0 := ~__mod_description49~0[15 := 32];~__mod_description49~0 := ~__mod_description49~0[16 := 72];~__mod_description49~0 := ~__mod_description49~0[17 := 73];~__mod_description49~0 := ~__mod_description49~0[18 := 68];~__mod_description49~0 := ~__mod_description49~0[19 := 32];~__mod_description49~0 := ~__mod_description49~0[20 := 66];~__mod_description49~0 := ~__mod_description49~0[21 := 111];~__mod_description49~0 := ~__mod_description49~0[22 := 111];~__mod_description49~0 := ~__mod_description49~0[23 := 116];~__mod_description49~0 := ~__mod_description49~0[24 := 32];~__mod_description49~0 := ~__mod_description49~0[25 := 80];~__mod_description49~0 := ~__mod_description49~0[26 := 114];~__mod_description49~0 := ~__mod_description49~0[27 := 111];~__mod_description49~0 := ~__mod_description49~0[28 := 116];~__mod_description49~0 := ~__mod_description49~0[29 := 111];~__mod_description49~0 := ~__mod_description49~0[30 := 99];~__mod_description49~0 := ~__mod_description49~0[31 := 111];~__mod_description49~0 := ~__mod_description49~0[32 := 108];~__mod_description49~0 := ~__mod_description49~0[33 := 32];~__mod_description49~0 := ~__mod_description49~0[34 := 109];~__mod_description49~0 := ~__mod_description49~0[35 := 111];~__mod_description49~0 := ~__mod_description49~0[36 := 117];~__mod_description49~0 := ~__mod_description49~0[37 := 115];~__mod_description49~0 := ~__mod_description49~0[38 := 101];~__mod_description49~0 := ~__mod_description49~0[39 := 32];~__mod_description49~0 := ~__mod_description49~0[40 := 100];~__mod_description49~0 := ~__mod_description49~0[41 := 114];~__mod_description49~0 := ~__mod_description49~0[42 := 105];~__mod_description49~0 := ~__mod_description49~0[43 := 118];~__mod_description49~0 := ~__mod_description49~0[44 := 101];~__mod_description49~0 := ~__mod_description49~0[45 := 114];~__mod_description49~0 := ~__mod_description49~0[46 := 0];~__mod_license50~0 := ~__mod_license50~0[0 := 108];~__mod_license50~0 := ~__mod_license50~0[1 := 105];~__mod_license50~0 := ~__mod_license50~0[2 := 99];~__mod_license50~0 := ~__mod_license50~0[3 := 101];~__mod_license50~0 := ~__mod_license50~0[4 := 110];~__mod_license50~0 := ~__mod_license50~0[5 := 115];~__mod_license50~0 := ~__mod_license50~0[6 := 101];~__mod_license50~0 := ~__mod_license50~0[7 := 61];~__mod_license50~0 := ~__mod_license50~0[8 := 71];~__mod_license50~0 := ~__mod_license50~0[9 := 80];~__mod_license50~0 := ~__mod_license50~0[10 := 76];~__mod_license50~0 := ~__mod_license50~0[11 := 0];~LDV_IN_INTERRUPT~0 := 0;~res_usb_mouse_probe_3~0 := 0;~ldv_urb_state~0 := 0;~ldv_coherent_state~0 := 0;call ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset := #Ultimate.alloc(24);call write~init~int(896, ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 2 + ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 4 + ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 6 + ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 8 + ~#usb_mouse_id_table~0.offset, 2);call write~init~int(0, ~#usb_mouse_id_table~0.base, 10 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(0, ~#usb_mouse_id_table~0.base, 11 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(0, ~#usb_mouse_id_table~0.base, 12 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(3, ~#usb_mouse_id_table~0.base, 13 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(1, ~#usb_mouse_id_table~0.base, 14 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(2, ~#usb_mouse_id_table~0.base, 15 + ~#usb_mouse_id_table~0.offset, 1);call write~init~int(0, ~#usb_mouse_id_table~0.base, 16 + ~#usb_mouse_id_table~0.offset, 8);call ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset := #Ultimate.alloc(281);call write~init~$Pointer$(#t~string124.base, #t~string124.offset, ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~usb_mouse_probe.base, #funAddr~usb_mouse_probe.offset, ~#usb_mouse_driver~0.base, 8 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~usb_mouse_disconnect.base, #funAddr~usb_mouse_disconnect.offset, ~#usb_mouse_driver~0.base, 16 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 24 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 32 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 40 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 48 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 56 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 64 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, ~#usb_mouse_driver~0.base, 72 + ~#usb_mouse_driver~0.offset, 8);call write~init~int(0, ~#usb_mouse_driver~0.base, 80 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 84 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 88 + ~#usb_mouse_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 92 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 100 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 108 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 116 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 124 + ~#usb_mouse_driver~0.offset, 8);call write~init~int(0, ~#usb_mouse_driver~0.base, 132 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 136 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 144 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 152 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 160 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 168 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 176 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 184 + ~#usb_mouse_driver~0.offset, 8);call write~init~int(0, ~#usb_mouse_driver~0.base, 192 + ~#usb_mouse_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 193 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 201 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 209 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 217 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 225 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 233 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 241 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 249 + ~#usb_mouse_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 257 + ~#usb_mouse_driver~0.offset, 8);call write~init~int(0, ~#usb_mouse_driver~0.base, 265 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 269 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 273 + ~#usb_mouse_driver~0.offset, 4);call write~init~int(0, ~#usb_mouse_driver~0.base, 277 + ~#usb_mouse_driver~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(#NULL.base)|=4294967320, |old(#NULL.offset)|=4294967400, |old(#t~string100.base)|=4294967367, |old(#t~string100.offset)|=4294967349, |old(#t~string124.base)|=4294967303, |old(#t~string124.offset)|=4294967358, |old(#t~string127.base)|=4294967357, |old(#t~string127.offset)|=4294967323, |old(#t~string17.base)|=4294967399, |old(#t~string17.offset)|=4294967365, |old(#t~string23.base)|=4294967325, |old(#t~string23.offset)|=4294967311, |old(#t~string29.base)|=4294967322, |old(#t~string29.offset)|=4294967352, |old(#t~string31.base)|=4294967406, |old(#t~string31.offset)|=4294967383, |old(#t~string59.base)|=4294967308, |old(#t~string59.offset)|=4294967360, |old(#t~string90.base)|=4294967309, |old(#t~string90.offset)|=4294967370, |old(#t~string96.base)|=4294967314, |old(#t~string96.offset)|=4294967369, |old(~#usb_mouse_driver~0.base)|=4294967387, |old(~#usb_mouse_driver~0.offset)|=4294967347, |old(~#usb_mouse_id_table~0.base)|=4294967306, |old(~#usb_mouse_id_table~0.offset)|=4294967317, |old(~ldv_coherent_state~0)|=4294967300, |old(~LDV_IN_INTERRUPT~0)|=4294967315, |old(~ldv_urb_state~0)|=4294967351, |old(~res_usb_mouse_probe_3~0)|=4294967404, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(#NULL.base)|=4294967320, |old(#NULL.offset)|=4294967400, |old(#t~string100.base)|=4294967367, |old(#t~string100.offset)|=4294967349, |old(#t~string124.base)|=4294967303, |old(#t~string124.offset)|=4294967358, |old(#t~string127.base)|=4294967357, |old(#t~string127.offset)|=4294967323, |old(#t~string17.base)|=4294967399, |old(#t~string17.offset)|=4294967365, |old(#t~string23.base)|=4294967325, |old(#t~string23.offset)|=4294967311, |old(#t~string29.base)|=4294967322, |old(#t~string29.offset)|=4294967352, |old(#t~string31.base)|=4294967406, |old(#t~string31.offset)|=4294967383, |old(#t~string59.base)|=4294967308, |old(#t~string59.offset)|=4294967360, |old(#t~string90.base)|=4294967309, |old(#t~string90.offset)|=4294967370, |old(#t~string96.base)|=4294967314, |old(#t~string96.offset)|=4294967369, |old(~#usb_mouse_driver~0.base)|=4294967387, |old(~#usb_mouse_driver~0.offset)|=4294967347, |old(~#usb_mouse_id_table~0.base)|=4294967306, |old(~#usb_mouse_id_table~0.offset)|=4294967317, |old(~ldv_coherent_state~0)|=4294967300, |old(~LDV_IN_INTERRUPT~0)|=4294967315, |old(~ldv_urb_state~0)|=4294967351, |old(~res_usb_mouse_probe_3~0)|=4294967404, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #519#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] havoc ~var_group1~0.base, ~var_group1~0.offset;havoc ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset;havoc ~tmp___7~11;havoc ~ldv_s_usb_mouse_driver_usb_driver~0;havoc ~tmp___8~4;havoc ~tmp___9~1;~LDV_IN_INTERRUPT~0 := 1;call ldv_initialize(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret129 := usb_mouse_init(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] havoc ~retval~0;havoc ~tmp___7~9; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_register_#in~driver.base|=4294967340, |usb_register_#in~driver.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~driver.base, ~driver.offset := #in~driver.base, #in~driver.offset;havoc ~tmp___7~2;call #t~ret24 := usb_register_driver(~driver.base, ~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string23.base, #t~string23.offset);assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647;~tmp___7~2 := #t~ret24;havoc #t~ret24;#res := ~tmp___7~2; VAL [usb_register_~driver.base=4294967340, usb_register_~driver.offset=0, usb_register_~tmp___7~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_register_#in~driver.base|=4294967340, |usb_register_#in~driver.offset|=0, |usb_register_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_register_~driver.base=4294967340, usb_register_~driver.offset=0, usb_register_~tmp___7~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_register_#in~driver.base|=4294967340, |usb_register_#in~driver.offset|=0, |usb_register_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #461#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_init_#t~ret125|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647;~tmp___7~9 := #t~ret125;havoc #t~ret125;~retval~0 := ~tmp___7~9; VAL [usb_mouse_init_~retval~0=0, usb_mouse_init_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 == ~retval~0;havoc #t~nondet126; VAL [usb_mouse_init_~retval~0=0, usb_mouse_init_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] #res := ~retval~0; VAL [usb_mouse_init_~retval~0=0, usb_mouse_init_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_init_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_mouse_init_~retval~0=0, usb_mouse_init_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_init_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #447#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |main_#t~ret129|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647;~tmp___7~11 := #t~ret129;havoc #t~ret129; VAL [main_~tmp___7~11=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~tmp___7~11);~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647;~tmp___9~1 := #t~nondet130;havoc #t~nondet130; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___9~1; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647;~tmp___8~4 := #t~nondet131;havoc #t~nondet131; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 == ~tmp___8~4; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;~id.base, ~id.offset := #in~id.base, #in~id.offset;havoc ~dev~1.base, ~dev~1.offset;havoc ~tmp___7~7.base, ~tmp___7~7.offset;havoc ~interface~0.base, ~interface~0.offset;havoc ~endpoint~0.base, ~endpoint~0.offset;havoc ~mouse~3.base, ~mouse~3.offset;havoc ~input_dev~0.base, ~input_dev~0.offset;havoc ~pipe~0;havoc ~maxp~0;havoc ~error~0;havoc ~tmp___8~2;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~tmp___11~0.base, ~tmp___11~0.offset;havoc ~tmp___12~0.base, ~tmp___12~0.offset;havoc ~tmp___13~0;havoc ~tmp___14~0;havoc ~tmp~2; VAL [usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |interface_to_usbdev_#in~intf.base|=4294967302, |interface_to_usbdev_#in~intf.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;havoc ~__mptr~0.base, ~__mptr~0.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~intf.base, 68 + ~intf.offset, 8);~__mptr~0.base, ~__mptr~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset;#res.base, #res.offset := ~__mptr~0.base, ~__mptr~0.offset - 131; VAL [interface_to_usbdev_~__mptr~0.base=4294967339, interface_to_usbdev_~__mptr~0.offset=131, interface_to_usbdev_~intf.base=4294967302, interface_to_usbdev_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |interface_to_usbdev_#in~intf.base|=4294967302, |interface_to_usbdev_#in~intf.offset|=0, |interface_to_usbdev_#res.base|=4294967339, |interface_to_usbdev_#res.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [interface_to_usbdev_~__mptr~0.base=4294967339, interface_to_usbdev_~__mptr~0.offset=131, interface_to_usbdev_~intf.base=4294967302, interface_to_usbdev_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |interface_to_usbdev_#in~intf.base|=4294967302, |interface_to_usbdev_#in~intf.offset|=0, |interface_to_usbdev_#res.base|=4294967339, |interface_to_usbdev_#res.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #467#return; VAL [usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret71.base|=4294967339, |usb_mouse_probe_#t~ret71.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___7~7.base, ~tmp___7~7.offset := #t~ret71.base, #t~ret71.offset;havoc #t~ret71.base, #t~ret71.offset;~dev~1.base, ~dev~1.offset := ~tmp___7~7.base, ~tmp___7~7.offset;~error~0 := -12;call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~intf.base, 8 + ~intf.offset, 8);~interface~0.base, ~interface~0.offset := #t~mem72.base, #t~mem72.offset;havoc #t~mem72.base, #t~mem72.offset;call #t~mem73 := read~int(~interface~0.base, 4 + ~interface~0.offset, 1); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem73|=(- 255), |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(1 != #t~mem73 % 256);havoc #t~mem73;call #t~mem74.base, #t~mem74.offset := read~$Pointer$(~interface~0.base, 9 + ~interface~0.offset, 8);~endpoint~0.base, ~endpoint~0.offset := #t~mem74.base, #t~mem74.offset;havoc #t~mem74.base, #t~mem74.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset;havoc ~tmp~1;havoc ~tmp___0~0;havoc ~tmp___1~0; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_xfer_int_#in~epd.base|=4294967321, |usb_endpoint_xfer_int_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset;call #t~mem10 := read~int(~epd.base, 3 + ~epd.offset, 1);#res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0);havoc #t~mem10; VAL [usb_endpoint_xfer_int_~epd.base=4294967321, usb_endpoint_xfer_int_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_xfer_int_#in~epd.base|=4294967321, |usb_endpoint_xfer_int_#in~epd.offset|=0, |usb_endpoint_xfer_int_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_endpoint_xfer_int_~epd.base=4294967321, usb_endpoint_xfer_int_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_xfer_int_#in~epd.base|=4294967321, |usb_endpoint_xfer_int_#in~epd.offset|=0, |usb_endpoint_xfer_int_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #511#return; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |usb_endpoint_is_int_in_#t~ret11|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647;~tmp~1 := #t~ret11;havoc #t~ret11; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp~1; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_dir_in_#in~epd.base|=4294967321, |usb_endpoint_dir_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset;call #t~mem9 := read~int(~epd.base, 2 + ~epd.offset, 1);#res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0);havoc #t~mem9; VAL [usb_endpoint_dir_in_~epd.base=4294967321, usb_endpoint_dir_in_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_dir_in_#in~epd.base|=4294967321, |usb_endpoint_dir_in_#in~epd.offset|=0, |usb_endpoint_dir_in_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_endpoint_dir_in_~epd.base=4294967321, usb_endpoint_dir_in_~epd.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_dir_in_#in~epd.base|=4294967321, |usb_endpoint_dir_in_#in~epd.offset|=0, |usb_endpoint_dir_in_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #513#return; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |usb_endpoint_is_int_in_#t~ret12|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647;~tmp___0~0 := #t~ret12;havoc #t~ret12; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp___0~0=1, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___0~0;~tmp___1~0 := 1; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp___0~0=1, usb_endpoint_is_int_in_~tmp___1~0=1, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] #res := ~tmp___1~0; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp___0~0=1, usb_endpoint_is_int_in_~tmp___1~0=1, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |usb_endpoint_is_int_in_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_endpoint_is_int_in_~epd.base=4294967321, usb_endpoint_is_int_in_~epd.offset=0, usb_endpoint_is_int_in_~tmp___0~0=1, usb_endpoint_is_int_in_~tmp___1~0=1, usb_endpoint_is_int_in_~tmp~1=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_endpoint_is_int_in_#in~epd.base|=4294967321, |usb_endpoint_is_int_in_#in~epd.offset|=0, |usb_endpoint_is_int_in_#res|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #469#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret75|=1, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647;~tmp___8~2 := #t~ret75;havoc #t~ret75; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___8~2; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] call #t~mem76 := read~int(~endpoint~0.base, 2 + ~endpoint~0.offset, 1); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem76|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |__create_pipe_#in~dev.base|=4294967339, |__create_pipe_#in~dev.offset|=0, |__create_pipe_#in~endpoint|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~endpoint := #in~endpoint;call #t~mem28 := read~int(~dev.base, ~dev.offset, 4);#res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint);havoc #t~mem28; VAL [__create_pipe_~dev.base=4294967339, __create_pipe_~dev.offset=0, __create_pipe_~endpoint=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |__create_pipe_#in~dev.base|=4294967339, |__create_pipe_#in~dev.offset|=0, |__create_pipe_#in~endpoint|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [__create_pipe_~dev.base=4294967339, __create_pipe_~dev.offset=0, __create_pipe_~endpoint=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |__create_pipe_#in~dev.base|=4294967339, |__create_pipe_#in~dev.offset|=0, |__create_pipe_#in~endpoint|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #471#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem76|=0, |usb_mouse_probe_#t~ret77|=4294967336, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___9~0 := #t~ret77;havoc #t~mem76;havoc #t~ret77;~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~udev.base, ~udev.offset := #in~udev.base, #in~udev.offset;~pipe := #in~pipe;~is_out := #in~is_out;havoc ~ep~0.base, ~ep~0.offset;havoc ~epnum~0;havoc ~__ret_warn_on~0;havoc ~tmp___7~3;havoc ~__ret_warn_on___0~0;havoc ~tmp___8~0;~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~is_out);~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0);~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___8~0;call warn_slowpath_null(#t~string31.base, #t~string31.offset, 1570); VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] call #t~mem32.base, #t~mem32.offset := read~$Pointer$(~udev.base, 1263 + ~udev.offset + 8 * (~epnum~0 % 4294967296), 8);~ep~0.base, ~ep~0.offset := #t~mem32.base, #t~mem32.offset;havoc #t~mem32.base, #t~mem32.offset; VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~epnum~0=0, usb_maxpacket_~ep~0.base=0, usb_maxpacket_~ep~0.offset=0, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume ~ep~0.base == 0 && ~ep~0.offset == 0;#res := 0; VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~epnum~0=0, usb_maxpacket_~ep~0.base=0, usb_maxpacket_~ep~0.offset=0, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |usb_maxpacket_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_maxpacket_~__ret_warn_on___0~0=1, usb_maxpacket_~epnum~0=0, usb_maxpacket_~ep~0.base=0, usb_maxpacket_~ep~0.offset=0, usb_maxpacket_~is_out=0, usb_maxpacket_~pipe=0, usb_maxpacket_~tmp___8~0=1, usb_maxpacket_~udev.base=4294967339, usb_maxpacket_~udev.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_maxpacket_#in~is_out|=0, |usb_maxpacket_#in~pipe|=0, |usb_maxpacket_#in~udev.base|=4294967339, |usb_maxpacket_#in~udev.offset|=0, |usb_maxpacket_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #473#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret78|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___10~0 := #t~ret78;havoc #t~ret78;~maxp~0 := ~tmp___10~0 % 65536; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~size := #in~size;~flags := #in~flags;havoc ~tmp~0.base, ~tmp~0.offset; VAL [kzalloc_~flags=208, kzalloc_~size=232, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~size|=232, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~size := #in~size;~flags := #in~flags;havoc ~tmp___2~0.base, ~tmp___2~0.offset;call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags);~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset;havoc #t~ret7.base, #t~ret7.offset;#res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [kmalloc_~flags=4294967345, kmalloc_~size=232, kmalloc_~tmp___2~0.base=4294967386, kmalloc_~tmp___2~0.offset=(- 38), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~flags|=4294967345, |kmalloc_#in~size|=232, |kmalloc_#res.base|=4294967386, |kmalloc_#res.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [kmalloc_~flags=4294967345, kmalloc_~size=232, kmalloc_~tmp___2~0.base=4294967386, kmalloc_~tmp___2~0.offset=(- 38), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~flags|=4294967345, |kmalloc_#in~size|=232, |kmalloc_#res.base|=4294967386, |kmalloc_#res.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #509#return; VAL [kzalloc_~flags=208, kzalloc_~size=232, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |kzalloc_#t~ret8.base|=4294967386, |kzalloc_#t~ret8.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset;havoc #t~ret8.base, #t~ret8.offset;#res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [kzalloc_~flags=208, kzalloc_~size=232, kzalloc_~tmp~0.base=4294967386, kzalloc_~tmp~0.offset=(- 38), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |kzalloc_#res.base|=4294967386, |kzalloc_#res.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [kzalloc_~flags=208, kzalloc_~size=232, kzalloc_~tmp~0.base=4294967386, kzalloc_~tmp~0.offset=(- 38), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=208, |kzalloc_#in~size|=232, |kzalloc_#res.base|=4294967386, |kzalloc_#res.offset|=(- 38), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #475#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret79.base|=4294967386, |usb_mouse_probe_#t~ret79.offset|=(- 38), |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___11~0.base, ~tmp___11~0.offset := #t~ret79.base, #t~ret79.offset;havoc #t~ret79.base, #t~ret79.offset;~mouse~3.base, ~mouse~3.offset := ~tmp___11~0.base, ~tmp___11~0.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~size|=1928, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~size := #in~size;~flags := #in~flags;havoc ~tmp~0.base, ~tmp~0.offset; VAL [kzalloc_~flags=4294967313, kzalloc_~size=1928, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=4294967313, |kzalloc_#in~size|=1928, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~size|=1928, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~size := #in~size;~flags := #in~flags;havoc ~tmp___2~0.base, ~tmp___2~0.offset;call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags);~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset;havoc #t~ret7.base, #t~ret7.offset;#res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [kmalloc_~flags=4294967381, kmalloc_~size=1928, kmalloc_~tmp___2~0.base=4294967339, kmalloc_~tmp___2~0.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~flags|=4294967381, |kmalloc_#in~size|=1928, |kmalloc_#res.base|=4294967339, |kmalloc_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [kmalloc_~flags=4294967381, kmalloc_~size=1928, kmalloc_~tmp___2~0.base=4294967339, kmalloc_~tmp___2~0.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kmalloc_#in~flags|=4294967381, |kmalloc_#in~size|=1928, |kmalloc_#res.base|=4294967339, |kmalloc_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #509#return; VAL [kzalloc_~flags=4294967313, kzalloc_~size=1928, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=4294967313, |kzalloc_#in~size|=1928, |kzalloc_#t~ret8.base|=4294967339, |kzalloc_#t~ret8.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset;havoc #t~ret8.base, #t~ret8.offset;#res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [kzalloc_~flags=4294967313, kzalloc_~size=1928, kzalloc_~tmp~0.base=4294967339, kzalloc_~tmp~0.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=4294967313, |kzalloc_#in~size|=1928, |kzalloc_#res.base|=4294967339, |kzalloc_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [kzalloc_~flags=4294967313, kzalloc_~size=1928, kzalloc_~tmp~0.base=4294967339, kzalloc_~tmp~0.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |kzalloc_#in~flags|=4294967313, |kzalloc_#in~size|=1928, |kzalloc_#res.base|=4294967339, |kzalloc_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #497#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_allocate_device_#t~ret34.base|=4294967339, |input_allocate_device_#t~ret34.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] #res.base, #res.offset := #t~ret34.base, #t~ret34.offset;havoc #t~ret34.base, #t~ret34.offset; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_allocate_device_#res.base|=4294967339, |input_allocate_device_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_allocate_device_#res.base|=4294967339, |input_allocate_device_#res.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #477#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret80.base|=4294967339, |usb_mouse_probe_#t~ret80.offset|=(- 24), |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~input_dev~0.base, ~input_dev~0.offset := #t~ret80.base, #t~ret80.offset;havoc #t~ret80.base, #t~ret80.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(~mouse~3.base == 0 && ~mouse~3.offset == 0); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(~input_dev~0.base == 0 && ~input_dev~0.offset == 0); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~size := #in~size;~mem_flags := #in~mem_flags;~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset;havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset;havoc ~tmp___7~12.base, ~tmp___7~12.offset; VAL [usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] call #t~ret133.base, #t~ret133.offset := ldv_undefined_pointer();~tmp___7~12.base, ~tmp___7~12.offset := #t~ret133.base, #t~ret133.offset;havoc #t~ret133.base, #t~ret133.offset;~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~12.base, ~tmp___7~12.offset; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=4294967386, usb_alloc_coherent_~arbitrary_memory~0.offset=66, usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, usb_alloc_coherent_~tmp___7~12.base=4294967386, usb_alloc_coherent_~tmp___7~12.offset=66, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0);~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0;#res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=4294967386, usb_alloc_coherent_~arbitrary_memory~0.offset=66, usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, usb_alloc_coherent_~tmp___7~12.base=4294967386, usb_alloc_coherent_~tmp___7~12.offset=66, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |usb_alloc_coherent_#res.base|=4294967386, |usb_alloc_coherent_#res.offset|=66, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=4294967386, usb_alloc_coherent_~arbitrary_memory~0.offset=66, usb_alloc_coherent_~dev.base=4294967339, usb_alloc_coherent_~dev.offset=0, usb_alloc_coherent_~dma.base=4294967386, usb_alloc_coherent_~dma.offset=186, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=8, usb_alloc_coherent_~tmp___7~12.base=4294967386, usb_alloc_coherent_~tmp___7~12.offset=66, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_coherent_#in~dev.base|=4294967339, |usb_alloc_coherent_#in~dev.offset|=0, |usb_alloc_coherent_#in~dma.base|=4294967386, |usb_alloc_coherent_#in~dma.offset|=186, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=8, |usb_alloc_coherent_#res.base|=4294967386, |usb_alloc_coherent_#res.offset|=66, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET #479#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret81.base|=4294967386, |usb_mouse_probe_#t~ret81.offset|=66, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___12~0.base, ~tmp___12~0.offset := #t~ret81.base, #t~ret81.offset;havoc #t~ret81.base, #t~ret81.offset;call write~$Pointer$(~tmp___12~0.base, ~tmp___12~0.offset, ~mouse~3.base, 216 + ~mouse~3.offset, 8);call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem82.base|=4294967386, |usb_mouse_probe_#t~mem82.offset|=66, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(#t~mem82.base == 0 && #t~mem82.offset == 0);havoc #t~mem82.base, #t~mem82.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ~iso_packets := #in~iso_packets;~mem_flags := #in~mem_flags;havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset;havoc ~tmp___7~13.base, ~tmp___7~13.offset; VAL [usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] call #t~ret134.base, #t~ret134.offset := ldv_undefined_pointer();~tmp___7~13.base, ~tmp___7~13.offset := #t~ret134.base, #t~ret134.offset;havoc #t~ret134.base, #t~ret134.offset;~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~13.base, ~tmp___7~13.offset; VAL [usb_alloc_urb_~arbitrary_memory~1.base=4294967386, usb_alloc_urb_~arbitrary_memory~1.offset=74, usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, usb_alloc_urb_~tmp___7~13.base=4294967386, usb_alloc_urb_~tmp___7~13.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0);~ldv_urb_state~0 := 1 + ~ldv_urb_state~0;#res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; VAL [usb_alloc_urb_~arbitrary_memory~1.base=4294967386, usb_alloc_urb_~arbitrary_memory~1.offset=74, usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, usb_alloc_urb_~tmp___7~13.base=4294967386, usb_alloc_urb_~tmp___7~13.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |usb_alloc_urb_#res.base|=4294967386, |usb_alloc_urb_#res.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_alloc_urb_~arbitrary_memory~1.base=4294967386, usb_alloc_urb_~arbitrary_memory~1.offset=74, usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=208, usb_alloc_urb_~tmp___7~13.base=4294967386, usb_alloc_urb_~tmp___7~13.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=208, |usb_alloc_urb_#res.base|=4294967386, |usb_alloc_urb_#res.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #481#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret83.base|=4294967386, |usb_mouse_probe_#t~ret83.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call write~$Pointer$(#t~ret83.base, #t~ret83.offset, ~mouse~3.base, 208 + ~mouse~3.offset, 8);havoc #t~ret83.base, #t~ret83.offset;call #t~mem84.base, #t~mem84.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem84.base|=4294967386, |usb_mouse_probe_#t~mem84.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(#t~mem84.base == 0 && #t~mem84.offset == 0);havoc #t~mem84.base, #t~mem84.offset;call write~$Pointer$(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 192 + ~mouse~3.offset, 8);call write~$Pointer$(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, 200 + ~mouse~3.offset, 8);call #t~mem85.base, #t~mem85.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem85.base|=4294967395, |usb_mouse_probe_#t~mem85.offset|=4294967394, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume #t~mem85.base != 0 || #t~mem85.offset != 0;havoc #t~mem85.base, #t~mem85.offset;call #t~mem86.base, #t~mem86.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8);call #t~ret87 := strlcpy(~mouse~3.base, ~mouse~3.offset, #t~mem86.base, #t~mem86.offset, 128);havoc #t~ret87;havoc #t~mem86.base, #t~mem86.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call #t~mem88.base, #t~mem88.offset := read~$Pointer$(~dev~1.base, 1559 + ~dev~1.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem88.base|=0, |usb_mouse_probe_#t~mem88.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(#t~mem88.base != 0 || #t~mem88.offset != 0);havoc #t~mem88.base, #t~mem88.offset; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___13~0 := #t~nondet94;havoc #t~nondet94; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~tmp___13~0 % 18446744073709551616);havoc #t~nondet95;call #t~mem97 := read~int(~dev~1.base, 1237 + ~dev~1.offset, 2);call #t~mem98 := read~int(~dev~1.base, 1239 + ~dev~1.offset, 2);havoc #t~mem97;havoc #t~mem98; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~buf.base, ~buf.offset := #in~buf.base, #in~buf.offset;~size := #in~size;havoc ~actual~0;havoc ~tmp___7~1;havoc #t~nondet16;call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~dev.base, 60 + ~dev.offset, 8);call #t~mem19.base, #t~mem19.offset := read~$Pointer$(#t~mem18.base, 12 + #t~mem18.offset, 8);~actual~0 := #t~nondet16;havoc #t~mem19.base, #t~mem19.offset;havoc #t~mem18.base, #t~mem18.offset; VAL [usb_make_path_~actual~0=65, usb_make_path_~buf.base=4294967386, usb_make_path_~buf.offset=90, usb_make_path_~dev.base=4294967339, usb_make_path_~dev.offset=0, usb_make_path_~size=64, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |usb_make_path_#t~nondet16|=65, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296);~tmp___7~1 := -1; VAL [usb_make_path_~actual~0=65, usb_make_path_~buf.base=4294967386, usb_make_path_~buf.offset=90, usb_make_path_~dev.base=4294967339, usb_make_path_~dev.offset=0, usb_make_path_~size=64, usb_make_path_~tmp___7~1=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |usb_make_path_#t~nondet16|=65, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] #res := ~tmp___7~1; VAL [usb_make_path_~actual~0=65, usb_make_path_~buf.base=4294967386, usb_make_path_~buf.offset=90, usb_make_path_~dev.base=4294967339, usb_make_path_~dev.offset=0, usb_make_path_~size=64, usb_make_path_~tmp___7~1=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |usb_make_path_#res|=(- 1), |usb_make_path_#t~nondet16|=65, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_make_path_~actual~0=65, usb_make_path_~buf.base=4294967386, usb_make_path_~buf.offset=90, usb_make_path_~dev.base=4294967339, usb_make_path_~dev.offset=0, usb_make_path_~size=64, usb_make_path_~tmp___7~1=(- 1), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_make_path_#in~buf.base|=4294967386, |usb_make_path_#in~buf.offset|=90, |usb_make_path_#in~dev.base|=4294967339, |usb_make_path_#in~dev.offset|=0, |usb_make_path_#in~size|=64, |usb_make_path_#res|=(- 1), |usb_make_path_#t~nondet16|=65, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #483#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~ret99|=(- 1), |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647;havoc #t~ret99;call #t~ret101 := strlcat(~mouse~3.base, 128 + ~mouse~3.offset, #t~string100.base, #t~string100.offset, 64);havoc #t~ret101;call write~$Pointer$(~mouse~3.base, ~mouse~3.offset, ~input_dev~0.base, ~input_dev~0.offset, 8);call write~$Pointer$(~mouse~3.base, 128 + ~mouse~3.offset, ~input_dev~0.base, 8 + ~input_dev~0.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_to_input_id_#in~dev.base|=4294967339, |usb_to_input_id_#in~dev.offset|=0, |usb_to_input_id_#in~id.base|=4294967339, |usb_to_input_id_#in~id.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~id.base, ~id.offset := #in~id.base, #in~id.offset;call write~int(3, ~id.base, ~id.offset, 2);call #t~mem39 := read~int(~dev.base, 1237 + ~dev.offset, 2);call write~int(#t~mem39, ~id.base, 2 + ~id.offset, 2);havoc #t~mem39;call #t~mem40 := read~int(~dev.base, 1239 + ~dev.offset, 2);call write~int(#t~mem40, ~id.base, 4 + ~id.offset, 2);havoc #t~mem40;call #t~mem41 := read~int(~dev.base, 1241 + ~dev.offset, 2);call write~int(#t~mem41, ~id.base, 6 + ~id.offset, 2);havoc #t~mem41; VAL [usb_to_input_id_~dev.base=4294967339, usb_to_input_id_~dev.offset=0, usb_to_input_id_~id.base=4294967339, usb_to_input_id_~id.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_to_input_id_#in~dev.base|=4294967339, |usb_to_input_id_#in~dev.offset|=0, |usb_to_input_id_#in~id.base|=4294967339, |usb_to_input_id_#in~id.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_to_input_id_~dev.base=4294967339, usb_to_input_id_~dev.offset=0, usb_to_input_id_~id.base=4294967339, usb_to_input_id_~id.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_to_input_id_#in~dev.base|=4294967339, |usb_to_input_id_#in~dev.offset|=0, |usb_to_input_id_#in~id.base|=4294967339, |usb_to_input_id_#in~id.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #485#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call write~$Pointer$(~intf.base, 68 + ~intf.offset, ~input_dev~0.base, 798 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(2, 4), ~input_dev~0.base, 40 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(1, 2), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8);call #t~mem102 := read~int(~input_dev~0.base, 80 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8);havoc #t~mem102;call #t~mem103 := read~int(~input_dev~0.base, 144 + ~input_dev~0.offset, 8);call write~int(~bitwiseOr(#t~mem103, 256), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8);havoc #t~mem103; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_set_drvdata_#in~data.base|=4294967386, |input_set_drvdata_#in~data.offset|=(- 38), |input_set_drvdata_#in~dev.base|=4294967339, |input_set_drvdata_#in~dev.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~data.base, ~data.offset := #in~data.base, #in~data.offset;call #t~ret36 := dev_set_drvdata(~dev.base, 798 + ~dev.offset, ~data.base, ~data.offset);assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647;havoc #t~ret36; VAL [input_set_drvdata_~data.base=4294967386, input_set_drvdata_~data.offset=(- 38), input_set_drvdata_~dev.base=4294967339, input_set_drvdata_~dev.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_set_drvdata_#in~data.base|=4294967386, |input_set_drvdata_#in~data.offset|=(- 38), |input_set_drvdata_#in~dev.base|=4294967339, |input_set_drvdata_#in~dev.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [input_set_drvdata_~data.base=4294967386, input_set_drvdata_~data.offset=(- 38), input_set_drvdata_~dev.base=4294967339, input_set_drvdata_~dev.offset=(- 24), |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |input_set_drvdata_#in~data.base|=4294967386, |input_set_drvdata_#in~data.offset|=(- 38), |input_set_drvdata_#in~dev.base|=4294967339, |input_set_drvdata_#in~dev.offset|=(- 24), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #487#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call write~$Pointer$(#funAddr~usb_mouse_open.base, #funAddr~usb_mouse_open.offset, ~input_dev~0.base, 536 + ~input_dev~0.offset, 8);call write~$Pointer$(#funAddr~usb_mouse_close.base, #funAddr~usb_mouse_close.offset, ~input_dev~0.base, 544 + ~input_dev~0.offset, 8); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(~maxp~0 > 8);~tmp___14~0 := ~maxp~0; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call #t~mem104.base, #t~mem104.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8);call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8);call #t~mem106 := read~int(~endpoint~0.base, 6 + ~endpoint~0.offset, 1); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem104.base|=4294967386, |usb_mouse_probe_#t~mem104.offset|=74, |usb_mouse_probe_#t~mem105.base|=4294967386, |usb_mouse_probe_#t~mem105.offset|=66, |usb_mouse_probe_#t~mem106|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~urb.base, ~urb.offset := #in~urb.base, #in~urb.offset;~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~pipe := #in~pipe;~transfer_buffer.base, ~transfer_buffer.offset := #in~transfer_buffer.base, #in~transfer_buffer.offset;~buffer_length := #in~buffer_length;~complete_fn.base, ~complete_fn.offset := #in~complete_fn.base, #in~complete_fn.offset;~context.base, ~context.offset := #in~context.base, #in~context.offset;~interval := #in~interval;call write~$Pointer$(~dev.base, ~dev.offset, ~urb.base, 64 + ~urb.offset, 8);call write~int(~pipe, ~urb.base, 80 + ~urb.offset, 4);call write~$Pointer$(~transfer_buffer.base, ~transfer_buffer.offset, ~urb.base, 96 + ~urb.offset, 8);call write~int(~buffer_length, ~urb.base, 124 + ~urb.offset, 4);call write~$Pointer$(~complete_fn.base, ~complete_fn.offset, ~urb.base, 172 + ~urb.offset, 8);call write~$Pointer$(~context.base, ~context.offset, ~urb.base, 164 + ~urb.offset, 8);call #t~mem26 := read~int(~dev.base, 28 + ~dev.offset, 4); VAL [usb_fill_int_urb_~buffer_length=0, usb_fill_int_urb_~complete_fn.base=(- 1), usb_fill_int_urb_~complete_fn.offset=2, usb_fill_int_urb_~context.base=4294967386, usb_fill_int_urb_~context.offset=(- 38), usb_fill_int_urb_~dev.base=4294967339, usb_fill_int_urb_~dev.offset=0, usb_fill_int_urb_~interval=0, usb_fill_int_urb_~pipe=0, usb_fill_int_urb_~transfer_buffer.base=4294967386, usb_fill_int_urb_~transfer_buffer.offset=66, usb_fill_int_urb_~urb.base=4294967386, usb_fill_int_urb_~urb.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |usb_fill_int_urb_#t~mem26|=4294967299, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume 3 == #t~mem26 % 4294967296;havoc #t~mem26;call write~int(~shiftLeft(1, ~interval - 1), ~urb.base, 156 + ~urb.offset, 4); VAL [usb_fill_int_urb_~buffer_length=0, usb_fill_int_urb_~complete_fn.base=(- 1), usb_fill_int_urb_~complete_fn.offset=2, usb_fill_int_urb_~context.base=4294967386, usb_fill_int_urb_~context.offset=(- 38), usb_fill_int_urb_~dev.base=4294967339, usb_fill_int_urb_~dev.offset=0, usb_fill_int_urb_~interval=0, usb_fill_int_urb_~pipe=0, usb_fill_int_urb_~transfer_buffer.base=4294967386, usb_fill_int_urb_~transfer_buffer.offset=66, usb_fill_int_urb_~urb.base=4294967386, usb_fill_int_urb_~urb.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call write~int(-1, ~urb.base, 148 + ~urb.offset, 4); VAL [usb_fill_int_urb_~buffer_length=0, usb_fill_int_urb_~complete_fn.base=(- 1), usb_fill_int_urb_~complete_fn.offset=2, usb_fill_int_urb_~context.base=4294967386, usb_fill_int_urb_~context.offset=(- 38), usb_fill_int_urb_~dev.base=4294967339, usb_fill_int_urb_~dev.offset=0, usb_fill_int_urb_~interval=0, usb_fill_int_urb_~pipe=0, usb_fill_int_urb_~transfer_buffer.base=4294967386, usb_fill_int_urb_~transfer_buffer.offset=66, usb_fill_int_urb_~urb.base=4294967386, usb_fill_int_urb_~urb.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_fill_int_urb_~buffer_length=0, usb_fill_int_urb_~complete_fn.base=(- 1), usb_fill_int_urb_~complete_fn.offset=2, usb_fill_int_urb_~context.base=4294967386, usb_fill_int_urb_~context.offset=(- 38), usb_fill_int_urb_~dev.base=4294967339, usb_fill_int_urb_~dev.offset=0, usb_fill_int_urb_~interval=0, usb_fill_int_urb_~pipe=0, usb_fill_int_urb_~transfer_buffer.base=4294967386, usb_fill_int_urb_~transfer_buffer.offset=66, usb_fill_int_urb_~urb.base=4294967386, usb_fill_int_urb_~urb.offset=74, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_fill_int_urb_#in~buffer_length|=0, |usb_fill_int_urb_#in~complete_fn.base|=(- 1), |usb_fill_int_urb_#in~complete_fn.offset|=2, |usb_fill_int_urb_#in~context.base|=4294967386, |usb_fill_int_urb_#in~context.offset|=(- 38), |usb_fill_int_urb_#in~dev.base|=4294967339, |usb_fill_int_urb_#in~dev.offset|=0, |usb_fill_int_urb_#in~interval|=0, |usb_fill_int_urb_#in~pipe|=0, |usb_fill_int_urb_#in~transfer_buffer.base|=4294967386, |usb_fill_int_urb_#in~transfer_buffer.offset|=66, |usb_fill_int_urb_#in~urb.base|=4294967386, |usb_fill_int_urb_#in~urb.offset|=74, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #489#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=(- 12), usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#t~mem104.base|=4294967386, |usb_mouse_probe_#t~mem104.offset|=74, |usb_mouse_probe_#t~mem105.base|=4294967386, |usb_mouse_probe_#t~mem105.offset|=66, |usb_mouse_probe_#t~mem106|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] havoc #t~mem105.base, #t~mem105.offset;havoc #t~mem106;havoc #t~mem104.base, #t~mem104.offset;call #t~mem107.base, #t~mem107.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8);call #t~mem108 := read~int(~mouse~3.base, 224 + ~mouse~3.offset, 8);call write~int(#t~mem108, #t~mem107.base, 104 + #t~mem107.offset, 8);havoc #t~mem108;havoc #t~mem107.base, #t~mem107.offset;call #t~mem109.base, #t~mem109.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8);call #t~mem110.base, #t~mem110.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8);call #t~mem111 := read~int(#t~mem110.base, 92 + #t~mem110.offset, 4);call write~int(~bitwiseOr(#t~mem111, 4), #t~mem109.base, 92 + #t~mem109.offset, 4);havoc #t~mem110.base, #t~mem110.offset;havoc #t~mem109.base, #t~mem109.offset;havoc #t~mem111;call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~mouse~3.base, 200 + ~mouse~3.offset, 8);call #t~ret113 := input_register_device(#t~mem112.base, #t~mem112.offset);assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647;~tmp~2 := #t~ret113;havoc #t~mem112.base, #t~mem112.offset;havoc #t~ret113;~error~0 := ~tmp~2; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~error~0); VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=4294967386, |usb_set_intfdata_#in~data.offset|=(- 38), |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;~data.base, ~data.offset := #in~data.base, #in~data.offset;call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset);assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;havoc #t~ret14; VAL [usb_set_intfdata_~data.base=4294967386, usb_set_intfdata_~data.offset=(- 38), usb_set_intfdata_~intf.base=4294967302, usb_set_intfdata_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=4294967386, |usb_set_intfdata_#in~data.offset|=(- 38), |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_set_intfdata_~data.base=4294967386, usb_set_intfdata_~data.offset=(- 38), usb_set_intfdata_~intf.base=4294967302, usb_set_intfdata_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=4294967386, |usb_set_intfdata_#in~data.offset|=(- 38), |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #491#return; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] #res := 0; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_mouse_probe_~dev~1.base=4294967339, usb_mouse_probe_~dev~1.offset=0, usb_mouse_probe_~endpoint~0.base=4294967321, usb_mouse_probe_~endpoint~0.offset=0, usb_mouse_probe_~error~0=0, usb_mouse_probe_~id.base=4294967327, usb_mouse_probe_~id.offset=4294967392, usb_mouse_probe_~input_dev~0.base=4294967339, usb_mouse_probe_~input_dev~0.offset=(- 24), usb_mouse_probe_~interface~0.base=4294967330, usb_mouse_probe_~interface~0.offset=0, usb_mouse_probe_~intf.base=4294967302, usb_mouse_probe_~intf.offset=0, usb_mouse_probe_~maxp~0=0, usb_mouse_probe_~mouse~3.base=4294967386, usb_mouse_probe_~mouse~3.offset=(- 38), usb_mouse_probe_~pipe~0=0, usb_mouse_probe_~tmp___10~0=0, usb_mouse_probe_~tmp___11~0.base=4294967386, usb_mouse_probe_~tmp___11~0.offset=(- 38), usb_mouse_probe_~tmp___12~0.base=4294967386, usb_mouse_probe_~tmp___12~0.offset=66, usb_mouse_probe_~tmp___13~0=0, usb_mouse_probe_~tmp___14~0=0, usb_mouse_probe_~tmp___7~7.base=4294967339, usb_mouse_probe_~tmp___7~7.offset=0, usb_mouse_probe_~tmp___8~2=1, usb_mouse_probe_~tmp___9~0=4294967336, usb_mouse_probe_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_probe_#in~id.base|=4294967327, |usb_mouse_probe_#in~id.offset|=4294967392, |usb_mouse_probe_#in~intf.base|=4294967302, |usb_mouse_probe_#in~intf.offset|=0, |usb_mouse_probe_#res|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #449#return; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |main_#t~ret132|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647;~res_usb_mouse_probe_3~0 := #t~ret132;havoc #t~ret132;call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~res_usb_mouse_probe_3~0);~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647;~tmp___9~1 := #t~nondet130;havoc #t~nondet130; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume 0 != ~tmp___9~1; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=0, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647;~tmp___8~4 := #t~nondet131;havoc #t~nondet131; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 == ~tmp___8~4); VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume 1 == ~tmp___8~4; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume 1 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;havoc ~mouse~4.base, ~mouse~4.offset;havoc ~tmp___7~8.base, ~tmp___7~8.offset;havoc ~tmp___8~3.base, ~tmp___8~3.offset; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_get_intfdata_#in~intf.base|=4294967302, |usb_get_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;havoc ~tmp___7~0.base, ~tmp___7~0.offset;call #t~ret13.base, #t~ret13.offset := dev_get_drvdata(~intf.base, 68 + ~intf.offset);~tmp___7~0.base, ~tmp___7~0.offset := #t~ret13.base, #t~ret13.offset;havoc #t~ret13.base, #t~ret13.offset;#res.base, #res.offset := ~tmp___7~0.base, ~tmp___7~0.offset; VAL [usb_get_intfdata_~intf.base=4294967302, usb_get_intfdata_~intf.offset=0, usb_get_intfdata_~tmp___7~0.base=0, usb_get_intfdata_~tmp___7~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_get_intfdata_#in~intf.base|=4294967302, |usb_get_intfdata_#in~intf.offset|=0, |usb_get_intfdata_#res.base|=0, |usb_get_intfdata_#res.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_get_intfdata_~intf.base=4294967302, usb_get_intfdata_~intf.offset=0, usb_get_intfdata_~tmp___7~0.base=0, usb_get_intfdata_~tmp___7~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_get_intfdata_#in~intf.base|=4294967302, |usb_get_intfdata_#in~intf.offset|=0, |usb_get_intfdata_#res.base|=0, |usb_get_intfdata_#res.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #499#return; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |usb_mouse_disconnect_#t~ret117.base|=0, |usb_mouse_disconnect_#t~ret117.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~tmp___7~8.base, ~tmp___7~8.offset := #t~ret117.base, #t~ret117.offset;havoc #t~ret117.base, #t~ret117.offset;~mouse~4.base, ~mouse~4.offset := ~tmp___7~8.base, ~tmp___7~8.offset; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, usb_mouse_disconnect_~mouse~4.base=0, usb_mouse_disconnect_~mouse~4.offset=0, usb_mouse_disconnect_~tmp___7~8.base=0, usb_mouse_disconnect_~tmp___7~8.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=0, |usb_set_intfdata_#in~data.offset|=0, |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset;~data.base, ~data.offset := #in~data.base, #in~data.offset;call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset);assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647;havoc #t~ret14; VAL [usb_set_intfdata_~data.base=0, usb_set_intfdata_~data.offset=0, usb_set_intfdata_~intf.base=4294967302, usb_set_intfdata_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=0, |usb_set_intfdata_#in~data.offset|=0, |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_set_intfdata_~data.base=0, usb_set_intfdata_~data.offset=0, usb_set_intfdata_~intf.base=4294967302, usb_set_intfdata_~intf.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_set_intfdata_#in~data.base|=0, |usb_set_intfdata_#in~data.offset|=0, |usb_set_intfdata_#in~intf.base|=4294967302, |usb_set_intfdata_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #501#return; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, usb_mouse_disconnect_~mouse~4.base=0, usb_mouse_disconnect_~mouse~4.offset=0, usb_mouse_disconnect_~tmp___7~8.base=0, usb_mouse_disconnect_~tmp___7~8.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(~mouse~4.base != 0 || ~mouse~4.offset != 0); VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, usb_mouse_disconnect_~mouse~4.base=0, usb_mouse_disconnect_~mouse~4.offset=0, usb_mouse_disconnect_~tmp___7~8.base=0, usb_mouse_disconnect_~tmp___7~8.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [usb_mouse_disconnect_~intf.base=4294967302, usb_mouse_disconnect_~intf.offset=0, usb_mouse_disconnect_~mouse~4.base=0, usb_mouse_disconnect_~mouse~4.offset=0, usb_mouse_disconnect_~tmp___7~8.base=0, usb_mouse_disconnect_~tmp___7~8.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=1, |old(~res_usb_mouse_probe_3~0)|=0, |usb_mouse_disconnect_#in~intf.base|=4294967302, |usb_mouse_disconnect_#in~intf.offset|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #451#return; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=1, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=1, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647;~tmp___9~1 := #t~nondet130;havoc #t~nondet130; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=0, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 != ~tmp___9~1); VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=0, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0); VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=0, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call usb_mouse_exit(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] call usb_deregister(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] RET #453#return; VAL [main_~ldv_s_usb_mouse_driver_usb_driver~0=0, main_~tmp___7~11=0, main_~tmp___8~4=1, main_~tmp___9~1=0, main_~var_group1~0.base=4294967302, main_~var_group1~0.offset=0, main_~var_usb_mouse_probe_3_p1~0.base=4294967327, main_~var_usb_mouse_probe_3_p1~0.offset=4294967392, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ldv_check_final_state(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !(0 == ~ldv_urb_state~0); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ldv_blast_assert(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] assume !false; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=4294967368, |#t~string100.offset|=0, |#t~string124.base|=4294967385, |#t~string124.offset|=0, |#t~string127.base|=4294967356, |#t~string127.offset|=0, |#t~string17.base|=4294967397, |#t~string17.offset|=0, |#t~string23.base|=4294967326, |#t~string23.offset|=0, |#t~string29.base|=4294967328, |#t~string29.offset|=0, |#t~string31.base|=4294967407, |#t~string31.offset|=0, |#t~string59.base|=4294967307, |#t~string59.offset|=0, |#t~string90.base|=1, |#t~string90.offset|=0, |#t~string96.base|=4294967312, |#t~string96.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_usb_mouse_probe_3~0)|=0, |~#usb_mouse_driver~0.base|=4294967340, |~#usb_mouse_driver~0.offset|=0, |~#usb_mouse_id_table~0.base|=4294967373, |~#usb_mouse_id_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=4294967320, #NULL.offset=4294967400, #t~string100.base=4294967367, #t~string100.offset=4294967349, #t~string124.base=4294967303, #t~string124.offset=4294967358, #t~string127.base=4294967357, #t~string127.offset=4294967323, #t~string17.base=4294967399, #t~string17.offset=4294967365, #t~string23.base=4294967325, #t~string23.offset=4294967311, #t~string29.base=4294967322, #t~string29.offset=4294967352, #t~string31.base=4294967406, #t~string31.offset=4294967383, #t~string59.base=4294967308, #t~string59.offset=4294967360, #t~string90.base=4294967309, #t~string90.offset=4294967370, #t~string96.base=4294967314, #t~string96.offset=4294967369, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967387, ~#usb_mouse_driver~0.offset=4294967347, ~#usb_mouse_id_table~0.base=4294967306, ~#usb_mouse_id_table~0.offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3486] call #t~string17.base, #t~string17.offset := #Ultimate.alloc(10); [L3502] call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9); [L3564] call #t~string29.base, #t~string29.offset := #Ultimate.alloc(20); [L3580] call #t~string31.base, #t~string31.offset := #Ultimate.alloc(20); [L3752] call #t~string59.base, #t~string59.offset := #Ultimate.alloc(59); [L3880] call #t~string90.base, #t~string90.offset := #Ultimate.alloc(2); [L3880] call write~init~int(32, #t~string90.base, #t~string90.offset, 1); [L3880] call write~init~int(0, #t~string90.base, 1 + #t~string90.offset, 1); [L3898] call #t~string96.base, #t~string96.offset := #Ultimate.alloc(26); [L3904] call #t~string100.base, #t~string100.offset := #Ultimate.alloc(8); [L3988] call #t~string124.base, #t~string124.offset := #Ultimate.alloc(9); [L4017] call #t~string127.base, #t~string127.offset := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[0 := 97]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[1 := 117]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[2 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[3 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[4 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[5 := 114]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[6 := 61]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[7 := 86]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[8 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[9 := 106]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[10 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[11 := 101]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[12 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[13 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[14 := 32]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[15 := 80]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[16 := 97]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[17 := 118]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[18 := 108]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[19 := 105]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[20 := 107]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[21 := 32]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[22 := 60]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[23 := 118]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[24 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[25 := 106]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[26 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[27 := 101]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[28 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[29 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[30 := 64]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[31 := 117]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[32 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[33 := 119]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[34 := 46]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[35 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[36 := 122]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[37 := 62]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[38 := 0]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[0 := 100]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[1 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[2 := 115]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[3 := 99]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[4 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[5 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[6 := 112]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[7 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[8 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[9 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[10 := 110]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[11 := 61]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[12 := 85]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[13 := 83]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[14 := 66]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[15 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[16 := 72]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[17 := 73]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[18 := 68]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[19 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[20 := 66]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[21 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[22 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[23 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[24 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[25 := 80]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[26 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[27 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[28 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[29 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[30 := 99]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[31 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[32 := 108]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[33 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[34 := 109]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[35 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[36 := 117]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[37 := 115]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[38 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[39 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[40 := 100]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[41 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[42 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[43 := 118]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[44 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[45 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[46 := 0]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[0 := 108]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[1 := 105]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[2 := 99]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[3 := 101]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[4 := 110]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[5 := 115]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[6 := 101]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[7 := 61]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[8 := 71]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[9 := 80]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[10 := 76]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[11 := 0]; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] call ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset := #Ultimate.alloc(24); [L3982-L3984] call write~init~int(896, ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 2 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 4 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 6 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 8 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 10 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 11 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 12 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(3, ~#usb_mouse_id_table~0.base, 13 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(1, ~#usb_mouse_id_table~0.base, 14 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(2, ~#usb_mouse_id_table~0.base, 15 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 16 + ~#usb_mouse_id_table~0.offset, 8); [L3987-L4003] call ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset := #Ultimate.alloc(281); [L3987-L4003] call write~init~$Pointer$(#t~string124.base, #t~string124.offset, ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(#funAddr~usb_mouse_probe.base, #funAddr~usb_mouse_probe.offset, ~#usb_mouse_driver~0.base, 8 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(#funAddr~usb_mouse_disconnect.base, #funAddr~usb_mouse_disconnect.offset, ~#usb_mouse_driver~0.base, 16 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 24 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 32 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 40 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 48 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 56 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 64 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, ~#usb_mouse_driver~0.base, 72 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 80 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 84 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 88 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 92 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 100 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 108 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 116 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 124 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 132 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 136 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 144 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 152 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 160 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 168 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 176 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 184 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 192 + ~#usb_mouse_driver~0.offset, 1); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 193 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 201 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 209 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 217 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 225 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 233 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 241 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 249 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 257 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 265 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 269 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 273 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 277 + ~#usb_mouse_driver~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0.base, ~var_group1~0.offset; [L4065] havoc ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] call ldv_initialize(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver.base, ~driver.offset := #in~driver.base, #in~driver.offset; [L3498] havoc ~tmp___7~2; [L3502] call #t~ret24 := usb_register_driver(~driver.base, ~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string23.base, #t~string23.offset); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~driver.base=4294967340, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L3497-L3506] ensures true; VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~driver.base=4294967340, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret125=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015-L4021] assume 0 == ~retval~0; [L4017] havoc #t~nondet126; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4005] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret129=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] assume !(0 != ~tmp___7~11); [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] assume 0 != ~tmp___9~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100-L4139] assume 0 == ~tmp___8~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109-L4122] assume 0 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3794-L3955] ~id.base, ~id.offset := #in~id.base, #in~id.offset; [L3795] havoc ~dev~1.base, ~dev~1.offset; [L3796] havoc ~tmp___7~7.base, ~tmp___7~7.offset; [L3797] havoc ~interface~0.base, ~interface~0.offset; [L3798] havoc ~endpoint~0.base, ~endpoint~0.offset; [L3799] havoc ~mouse~3.base, ~mouse~3.offset; [L3800] havoc ~input_dev~0.base, ~input_dev~0.offset; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0.base, ~tmp___11~0.offset; [L3808] havoc ~tmp___12~0.base, ~tmp___12~0.offset; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~id.base=4294967327, ~id.offset=4294967392, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3473] havoc ~__mptr~0.base, ~__mptr~0.offset; [L3476] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~intf.base, 68 + ~intf.offset, 8); [L3476] ~__mptr~0.base, ~__mptr~0.offset := #t~mem15.base, #t~mem15.offset; [L3476] havoc #t~mem15.base, #t~mem15.offset; [L3477] #res.base, #res.offset := ~__mptr~0.base, ~__mptr~0.offset - 131; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__mptr~0.base=4294967339, ~__mptr~0.offset=131, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__mptr~0.base=4294967339, ~__mptr~0.offset=131, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret71.base=4294967339, #t~ret71.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~id.base=4294967327, ~id.offset=4294967392, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7.base, ~tmp___7~7.offset := #t~ret71.base, #t~ret71.offset; [L3815] havoc #t~ret71.base, #t~ret71.offset; [L3816] ~dev~1.base, ~dev~1.offset := ~tmp___7~7.base, ~tmp___7~7.offset; [L3817] ~error~0 := -12; [L3818] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~intf.base, 8 + ~intf.offset, 8); [L3818] ~interface~0.base, ~interface~0.offset := #t~mem72.base, #t~mem72.offset; [L3818] havoc #t~mem72.base, #t~mem72.offset; [L3820] call #t~mem73 := read~int(~interface~0.base, 4 + ~interface~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem73=-255, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3820-L3824] assume !(1 != #t~mem73 % 256); [L3820] havoc #t~mem73; [L3826] call #t~mem74.base, #t~mem74.offset := read~$Pointer$(~interface~0.base, 9 + ~interface~0.offset, 8); [L3826] ~endpoint~0.base, ~endpoint~0.offset := #t~mem74.base, #t~mem74.offset; [L3826] havoc #t~mem74.base, #t~mem74.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3419] call #t~mem10 := read~int(~epd.base, 3 + ~epd.offset, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret11=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] assume 0 != ~tmp~1; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3412] call #t~mem9 := read~int(~epd.base, 2 + ~epd.offset, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret12=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] assume 0 != ~tmp___0~0; [L3436] ~tmp___1~0 := 1; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3422-L3445] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret75=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3829-L3833] assume 0 != ~tmp___8~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] call #t~mem76 := read~int(~endpoint~0.base, 2 + ~endpoint~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem76=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] call #t~mem28 := read~int(~dev.base, ~dev.offset, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~mem76; [L3835] havoc #t~ret77; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev.base, ~udev.offset := #in~udev.base, #in~udev.offset; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0.base, ~ep~0.offset; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev.base=4294967339, ~udev.offset=0] [L3557-L3589] assume !(0 != ~is_out); [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3578-L3584] assume 0 != ~tmp___8~0; [L3580] call warn_slowpath_null(#t~string31.base, #t~string31.offset, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3587] call #t~mem32.base, #t~mem32.offset := read~$Pointer$(~udev.base, 1263 + ~udev.offset + 8 * (~epnum~0 % 4294967296), 8); [L3587] ~ep~0.base, ~ep~0.offset := #t~mem32.base, #t~mem32.offset; [L3587] havoc #t~mem32.base, #t~mem32.offset; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3590-L3594] assume ~ep~0.base == 0 && ~ep~0.offset == 0; [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3547-L3597] ensures true; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret78=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0.base, ~tmp___2~0.offset; [L3390] call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset; [L3390] havoc #t~ret7.base, #t~ret7.offset; [L3392] #res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [#in~flags=4294967345, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0.base=4294967386, ~tmp___2~0.offset=-38] [L3384-L3394] ensures true; VAL [#in~flags=4294967345, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0.base=4294967386, ~tmp___2~0.offset=-38] [L3400] RET call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~ret8.base=4294967386, #t~ret8.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset; [L3400] havoc #t~ret8.base, #t~ret8.offset; [L3402] #res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0.base=4294967386, ~tmp~0.offset=-38] [L3395-L3404] ensures true; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0.base=4294967386, ~tmp~0.offset=-38] [L3839] RET call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret79.base=4294967386, #t~ret79.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0.base, ~tmp___11~0.offset := #t~ret79.base, #t~ret79.offset; [L3839] havoc #t~ret79.base, #t~ret79.offset; [L3840] ~mouse~3.base, ~mouse~3.offset := ~tmp___11~0.base, ~tmp___11~0.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0.base, ~tmp___2~0.offset; [L3390] call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset; [L3390] havoc #t~ret7.base, #t~ret7.offset; [L3392] #res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [#in~flags=4294967381, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0.base=4294967339, ~tmp___2~0.offset=-24] [L3384-L3394] ensures true; VAL [#in~flags=4294967381, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0.base=4294967339, ~tmp___2~0.offset=-24] [L3400] RET call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #t~ret8.base=4294967339, #t~ret8.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset; [L3400] havoc #t~ret8.base, #t~ret8.offset; [L3402] #res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0.base=4294967339, ~tmp~0.offset=-24] [L3395-L3404] ensures true; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0.base=4294967339, ~tmp~0.offset=-24] [L3599] RET call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL.base=0, #NULL.offset=0, #t~ret34.base=4294967339, #t~ret34.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res.base, #res.offset := #t~ret34.base, #t~ret34.offset; [L3599] havoc #t~ret34.base, #t~ret34.offset; VAL [#NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3598-L3600] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret80.base=4294967339, #t~ret80.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0.base, ~input_dev~0.offset := #t~ret80.base, #t~ret80.offset; [L3841] havoc #t~ret80.base, #t~ret80.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843-L3850] assume !(~mouse~3.base == 0 && ~mouse~3.offset == 0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846-L3850] assume !(~input_dev~0.base == 0 && ~input_dev~0.offset == 0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset; [L4179] havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; [L4180] havoc ~tmp___7~12.base, ~tmp___7~12.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] assume !false; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] call #t~ret133.base, #t~ret133.offset := ldv_undefined_pointer(); [L4187] ~tmp___7~12.base, ~tmp___7~12.offset := #t~ret133.base, #t~ret133.offset; [L4187] havoc #t~ret133.base, #t~ret133.offset; [L4188] ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~12.base, ~tmp___7~12.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L4190-L4194] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0); [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L4175-L4176] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L3852] RET call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret81.base=4294967386, #t~ret81.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0.base, ~tmp___12~0.offset := #t~ret81.base, #t~ret81.offset; [L3852] havoc #t~ret81.base, #t~ret81.offset; [L3853] call write~$Pointer$(~tmp___12~0.base, ~tmp___12~0.offset, ~mouse~3.base, 216 + ~mouse~3.offset, 8); [L3855] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem82.base=4294967386, #t~mem82.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855-L3859] assume !(#t~mem82.base == 0 && #t~mem82.offset == 0); [L3855] havoc #t~mem82.base, #t~mem82.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; [L4243] havoc ~tmp___7~13.base, ~tmp___7~13.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] assume !false; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] call #t~ret134.base, #t~ret134.offset := ldv_undefined_pointer(); [L4250] ~tmp___7~13.base, ~tmp___7~13.offset := #t~ret134.base, #t~ret134.offset; [L4250] havoc #t~ret134.base, #t~ret134.offset; [L4251] ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~13.base, ~tmp___7~13.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L4253-L4257] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0); [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L4240] ensures true; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L3861] RET call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret83.base=4294967386, #t~ret83.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] call write~$Pointer$(#t~ret83.base, #t~ret83.offset, ~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3861] havoc #t~ret83.base, #t~ret83.offset; [L3863] call #t~mem84.base, #t~mem84.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem84.base=4294967386, #t~mem84.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863-L3867] assume !(#t~mem84.base == 0 && #t~mem84.offset == 0); [L3863] havoc #t~mem84.base, #t~mem84.offset; [L3868] call write~$Pointer$(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 192 + ~mouse~3.offset, 8); [L3869] call write~$Pointer$(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, 200 + ~mouse~3.offset, 8); [L3870] call #t~mem85.base, #t~mem85.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem85.base=4294967395, #t~mem85.offset=4294967394, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] assume #t~mem85.base != 0 || #t~mem85.offset != 0; [L3870] havoc #t~mem85.base, #t~mem85.offset; [L3872] call #t~mem86.base, #t~mem86.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); [L3872] call #t~ret87 := strlcpy(~mouse~3.base, ~mouse~3.offset, #t~mem86.base, #t~mem86.offset, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86.base, #t~mem86.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] call #t~mem88.base, #t~mem88.offset := read~$Pointer$(~dev~1.base, 1559 + ~dev~1.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem88.base=0, #t~mem88.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] assume !(#t~mem88.base != 0 || #t~mem88.offset != 0); [L3877] havoc #t~mem88.base, #t~mem88.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] assume !(0 != ~tmp___13~0 % 18446744073709551616); [L3898-L3899] havoc #t~nondet95; [L3898] call #t~mem97 := read~int(~dev~1.base, 1237 + ~dev~1.offset, 2); [L3899] call #t~mem98 := read~int(~dev~1.base, 1239 + ~dev~1.offset, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3480-L3495] ~buf.base, ~buf.offset := #in~buf.base, #in~buf.offset; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~dev.base, 60 + ~dev.offset, 8); [L3486] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(#t~mem18.base, 12 + #t~mem18.offset, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem19.base, #t~mem19.offset; [L3486] havoc #t~mem18.base, #t~mem18.offset; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488-L3492] assume ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [L3489] ~tmp___7~1 := -1; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #res=-1, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3480-L3495] ensures true; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #res=-1, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret99=-1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] call #t~ret101 := strlcat(~mouse~3.base, 128 + ~mouse~3.offset, #t~string100.base, #t~string100.offset, 64); [L3904] havoc #t~ret101; [L3905] call write~$Pointer$(~mouse~3.base, ~mouse~3.offset, ~input_dev~0.base, ~input_dev~0.offset, 8); [L3906] call write~$Pointer$(~mouse~3.base, 128 + ~mouse~3.offset, ~input_dev~0.base, 8 + ~input_dev~0.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3659-L3669] ~id.base, ~id.offset := #in~id.base, #in~id.offset; [L3663] call write~int(3, ~id.base, ~id.offset, 2); [L3664] call #t~mem39 := read~int(~dev.base, 1237 + ~dev.offset, 2); [L3664] call write~int(#t~mem39, ~id.base, 2 + ~id.offset, 2); [L3664] havoc #t~mem39; [L3665] call #t~mem40 := read~int(~dev.base, 1239 + ~dev.offset, 2); [L3665] call write~int(#t~mem40, ~id.base, 4 + ~id.offset, 2); [L3665] havoc #t~mem40; [L3666] call #t~mem41 := read~int(~dev.base, 1241 + ~dev.offset, 2); [L3666] call write~int(#t~mem41, ~id.base, 6 + ~id.offset, 2); [L3666] havoc #t~mem41; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~id.base=4294967339, ~id.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~id.base=4294967339, ~id.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] call write~$Pointer$(~intf.base, 68 + ~intf.offset, ~input_dev~0.base, 798 + ~input_dev~0.offset, 8); [L3909] call write~int(~bitwiseOr(2, 4), ~input_dev~0.base, 40 + ~input_dev~0.offset, 8); [L3910] call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3911] call write~int(~bitwiseOr(1, 2), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3912] call #t~mem102 := read~int(~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3912] call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3912] havoc #t~mem102; [L3913] call #t~mem103 := read~int(~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3913] call write~int(~bitwiseOr(#t~mem103, 256), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3913] havoc #t~mem103; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3613-L3622] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3618] call #t~ret36 := dev_set_drvdata(~dev.base, 798 + ~dev.offset, ~data.base, ~data.offset); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~dev.base=4294967339, ~dev.offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ensures true; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~dev.base=4294967339, ~dev.offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] call write~$Pointer$(#funAddr~usb_mouse_open.base, #funAddr~usb_mouse_open.offset, ~input_dev~0.base, 536 + ~input_dev~0.offset, 8); [L3916] call write~$Pointer$(#funAddr~usb_mouse_close.base, #funAddr~usb_mouse_close.offset, ~input_dev~0.base, 544 + ~input_dev~0.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918-L3922] assume !(~maxp~0 > 8); [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] call #t~mem104.base, #t~mem104.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3924] call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); [L3925] call #t~mem106 := read~int(~endpoint~0.base, 6 + ~endpoint~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem104.base=4294967386, #t~mem104.offset=74, #t~mem105.base=4294967386, #t~mem105.offset=66, #t~mem106=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb.base, ~urb.offset := #in~urb.base, #in~urb.offset; [L3508-L3532] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer.base, ~transfer_buffer.offset := #in~transfer_buffer.base, #in~transfer_buffer.offset; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn.base, ~complete_fn.offset := #in~complete_fn.base, #in~complete_fn.offset; [L3508-L3532] ~context.base, ~context.offset := #in~context.base, #in~context.offset; [L3508-L3532] ~interval := #in~interval; [L3515] call write~$Pointer$(~dev.base, ~dev.offset, ~urb.base, 64 + ~urb.offset, 8); [L3516] call write~int(~pipe, ~urb.base, 80 + ~urb.offset, 4); [L3517] call write~$Pointer$(~transfer_buffer.base, ~transfer_buffer.offset, ~urb.base, 96 + ~urb.offset, 8); [L3518] call write~int(~buffer_length, ~urb.base, 124 + ~urb.offset, 4); [L3519] call write~$Pointer$(~complete_fn.base, ~complete_fn.offset, ~urb.base, 172 + ~urb.offset, 8); [L3520] call write~$Pointer$(~context.base, ~context.offset, ~urb.base, 164 + ~urb.offset, 8); [L3521] call #t~mem26 := read~int(~dev.base, 28 + ~dev.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~mem26=4294967299, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3521-L3528] assume 3 == #t~mem26 % 4294967296; [L3521] havoc #t~mem26; [L3522] call write~int(~shiftLeft(1, ~interval - 1), ~urb.base, 156 + ~urb.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3529] call write~int(-1, ~urb.base, 148 + ~urb.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3508-L3532] ensures true; VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem104.base=4294967386, #t~mem104.offset=74, #t~mem105.base=4294967386, #t~mem105.offset=66, #t~mem106=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] havoc #t~mem105.base, #t~mem105.offset; [L3925] havoc #t~mem106; [L3924] havoc #t~mem104.base, #t~mem104.offset; [L3926] call #t~mem107.base, #t~mem107.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3926] call #t~mem108 := read~int(~mouse~3.base, 224 + ~mouse~3.offset, 8); [L3926] call write~int(#t~mem108, #t~mem107.base, 104 + #t~mem107.offset, 8); [L3926] havoc #t~mem108; [L3926] havoc #t~mem107.base, #t~mem107.offset; [L3927] call #t~mem109.base, #t~mem109.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3927] call #t~mem110.base, #t~mem110.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3927] call #t~mem111 := read~int(#t~mem110.base, 92 + #t~mem110.offset, 4); [L3927] call write~int(~bitwiseOr(#t~mem111, 4), #t~mem109.base, 92 + #t~mem109.offset, 4); [L3927] havoc #t~mem110.base, #t~mem110.offset; [L3927] havoc #t~mem109.base, #t~mem109.offset; [L3927] havoc #t~mem111; [L3928] call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~mouse~3.base, 200 + ~mouse~3.offset, 8); [L3928] call #t~ret113 := input_register_device(#t~mem112.base, #t~mem112.offset); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~mem112.base, #t~mem112.offset; [L3928] havoc #t~ret113; [L3929] ~error~0 := ~tmp~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] assume !(0 != ~error~0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3462-L3471] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3467] call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3461] ensures true; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3794-L3955] ensures true; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret132=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4114-L4118] assume !(0 != ~res_usb_mouse_probe_3~0); [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4089-L4096] assume 0 != ~tmp___9~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4100-L4139] assume !(0 == ~tmp___8~4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4103-L4139] assume 1 == ~tmp___8~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4125-L4132] assume 1 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3957] havoc ~mouse~4.base, ~mouse~4.offset; [L3958] havoc ~tmp___7~8.base, ~tmp___7~8.offset; [L3959] havoc ~tmp___8~3.base, ~tmp___8~3.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3451] havoc ~tmp___7~0.base, ~tmp___7~0.offset; [L3455] call #t~ret13.base, #t~ret13.offset := dev_get_drvdata(~intf.base, 68 + ~intf.offset); [L3455] ~tmp___7~0.base, ~tmp___7~0.offset := #t~ret13.base, #t~ret13.offset; [L3455] havoc #t~ret13.base, #t~ret13.offset; [L3457] #res.base, #res.offset := ~tmp___7~0.base, ~tmp___7~0.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0.base=0, ~tmp___7~0.offset=0] [L3449] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0.base=0, ~tmp___7~0.offset=0] [L3963] RET call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret117.base=0, #t~ret117.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8.base, ~tmp___7~8.offset := #t~ret117.base, #t~ret117.offset; [L3963] havoc #t~ret117.base, #t~ret117.offset; [L3964] ~mouse~4.base, ~mouse~4.offset := ~tmp___7~8.base, ~tmp___7~8.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3965] CALL call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3462-L3471] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3467] call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=0, ~data.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3461] ensures true; VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=0, ~data.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3967-L3978] assume !(~mouse~4.base != 0 || ~mouse~4.offset != 0); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3956-L3981] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4089-L4096] assume !(0 != ~tmp___9~1); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4092-L4096] assume !!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] call usb_deregister(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4026] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308-L4314] assume !(0 == ~ldv_urb_state~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=4294967320, #NULL.offset=4294967400, #t~string100.base=4294967367, #t~string100.offset=4294967349, #t~string124.base=4294967303, #t~string124.offset=4294967358, #t~string127.base=4294967357, #t~string127.offset=4294967323, #t~string17.base=4294967399, #t~string17.offset=4294967365, #t~string23.base=4294967325, #t~string23.offset=4294967311, #t~string29.base=4294967322, #t~string29.offset=4294967352, #t~string31.base=4294967406, #t~string31.offset=4294967383, #t~string59.base=4294967308, #t~string59.offset=4294967360, #t~string90.base=4294967309, #t~string90.offset=4294967370, #t~string96.base=4294967314, #t~string96.offset=4294967369, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967387, ~#usb_mouse_driver~0.offset=4294967347, ~#usb_mouse_id_table~0.base=4294967306, ~#usb_mouse_id_table~0.offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3486] call #t~string17.base, #t~string17.offset := #Ultimate.alloc(10); [L3502] call #t~string23.base, #t~string23.offset := #Ultimate.alloc(9); [L3564] call #t~string29.base, #t~string29.offset := #Ultimate.alloc(20); [L3580] call #t~string31.base, #t~string31.offset := #Ultimate.alloc(20); [L3752] call #t~string59.base, #t~string59.offset := #Ultimate.alloc(59); [L3880] call #t~string90.base, #t~string90.offset := #Ultimate.alloc(2); [L3880] call write~init~int(32, #t~string90.base, #t~string90.offset, 1); [L3880] call write~init~int(0, #t~string90.base, 1 + #t~string90.offset, 1); [L3898] call #t~string96.base, #t~string96.offset := #Ultimate.alloc(26); [L3904] call #t~string100.base, #t~string100.offset := #Ultimate.alloc(8); [L3988] call #t~string124.base, #t~string124.offset := #Ultimate.alloc(9); [L4017] call #t~string127.base, #t~string127.offset := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[0 := 97]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[1 := 117]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[2 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[3 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[4 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[5 := 114]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[6 := 61]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[7 := 86]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[8 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[9 := 106]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[10 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[11 := 101]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[12 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[13 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[14 := 32]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[15 := 80]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[16 := 97]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[17 := 118]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[18 := 108]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[19 := 105]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[20 := 107]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[21 := 32]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[22 := 60]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[23 := 118]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[24 := 111]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[25 := 106]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[26 := 116]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[27 := 101]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[28 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[29 := 104]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[30 := 64]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[31 := 117]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[32 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[33 := 119]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[34 := 46]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[35 := 99]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[36 := 122]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[37 := 62]; [L3670-L3681] ~__mod_author48~0 := ~__mod_author48~0[38 := 0]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[0 := 100]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[1 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[2 := 115]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[3 := 99]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[4 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[5 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[6 := 112]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[7 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[8 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[9 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[10 := 110]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[11 := 61]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[12 := 85]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[13 := 83]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[14 := 66]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[15 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[16 := 72]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[17 := 73]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[18 := 68]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[19 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[20 := 66]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[21 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[22 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[23 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[24 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[25 := 80]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[26 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[27 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[28 := 116]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[29 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[30 := 99]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[31 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[32 := 108]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[33 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[34 := 109]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[35 := 111]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[36 := 117]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[37 := 115]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[38 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[39 := 32]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[40 := 100]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[41 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[42 := 105]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[43 := 118]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[44 := 101]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[45 := 114]; [L3682-L3695] ~__mod_description49~0 := ~__mod_description49~0[46 := 0]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[0 := 108]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[1 := 105]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[2 := 99]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[3 := 101]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[4 := 110]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[5 := 115]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[6 := 101]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[7 := 61]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[8 := 71]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[9 := 80]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[10 := 76]; [L3696-L3700] ~__mod_license50~0 := ~__mod_license50~0[11 := 0]; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] call ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset := #Ultimate.alloc(24); [L3982-L3984] call write~init~int(896, ~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 2 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 4 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 6 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 8 + ~#usb_mouse_id_table~0.offset, 2); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 10 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 11 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 12 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(3, ~#usb_mouse_id_table~0.base, 13 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(1, ~#usb_mouse_id_table~0.base, 14 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(2, ~#usb_mouse_id_table~0.base, 15 + ~#usb_mouse_id_table~0.offset, 1); [L3982-L3984] call write~init~int(0, ~#usb_mouse_id_table~0.base, 16 + ~#usb_mouse_id_table~0.offset, 8); [L3987-L4003] call ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset := #Ultimate.alloc(281); [L3987-L4003] call write~init~$Pointer$(#t~string124.base, #t~string124.offset, ~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(#funAddr~usb_mouse_probe.base, #funAddr~usb_mouse_probe.offset, ~#usb_mouse_driver~0.base, 8 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(#funAddr~usb_mouse_disconnect.base, #funAddr~usb_mouse_disconnect.offset, ~#usb_mouse_driver~0.base, 16 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 24 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 32 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 40 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 48 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 56 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 64 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(~#usb_mouse_id_table~0.base, ~#usb_mouse_id_table~0.offset, ~#usb_mouse_driver~0.base, 72 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 80 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 84 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 88 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 92 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 100 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 108 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 116 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 124 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 132 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 136 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 144 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 152 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 160 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 168 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 176 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 184 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 192 + ~#usb_mouse_driver~0.offset, 1); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 193 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 201 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 209 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 217 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 225 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 233 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 241 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 249 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~$Pointer$(0, 0, ~#usb_mouse_driver~0.base, 257 + ~#usb_mouse_driver~0.offset, 8); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 265 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 269 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 273 + ~#usb_mouse_driver~0.offset, 4); [L3987-L4003] call write~init~int(0, ~#usb_mouse_driver~0.base, 277 + ~#usb_mouse_driver~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(#NULL.base)=4294967320, old(#NULL.offset)=4294967400, old(#t~string100.base)=4294967367, old(#t~string100.offset)=4294967349, old(#t~string124.base)=4294967303, old(#t~string124.offset)=4294967358, old(#t~string127.base)=4294967357, old(#t~string127.offset)=4294967323, old(#t~string17.base)=4294967399, old(#t~string17.offset)=4294967365, old(#t~string23.base)=4294967325, old(#t~string23.offset)=4294967311, old(#t~string29.base)=4294967322, old(#t~string29.offset)=4294967352, old(#t~string31.base)=4294967406, old(#t~string31.offset)=4294967383, old(#t~string59.base)=4294967308, old(#t~string59.offset)=4294967360, old(#t~string90.base)=4294967309, old(#t~string90.offset)=4294967370, old(#t~string96.base)=4294967314, old(#t~string96.offset)=4294967369, old(~#usb_mouse_driver~0.base)=4294967387, old(~#usb_mouse_driver~0.offset)=4294967347, old(~#usb_mouse_id_table~0.base)=4294967306, old(~#usb_mouse_id_table~0.offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0.base, ~var_group1~0.offset; [L4065] havoc ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] call ldv_initialize(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver.base, ~driver.offset := #in~driver.base, #in~driver.offset; [L3498] havoc ~tmp___7~2; [L3502] call #t~ret24 := usb_register_driver(~driver.base, ~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string23.base, #t~string23.offset); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~driver.base=4294967340, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L3497-L3506] ensures true; VAL [#in~driver.base=4294967340, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~driver.base=4294967340, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret125=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015-L4021] assume 0 == ~retval~0; [L4017] havoc #t~nondet126; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4005] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret129=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] assume !(0 != ~tmp___7~11); [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] assume 0 != ~tmp___9~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100-L4139] assume 0 == ~tmp___8~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109-L4122] assume 0 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3794-L3955] ~id.base, ~id.offset := #in~id.base, #in~id.offset; [L3795] havoc ~dev~1.base, ~dev~1.offset; [L3796] havoc ~tmp___7~7.base, ~tmp___7~7.offset; [L3797] havoc ~interface~0.base, ~interface~0.offset; [L3798] havoc ~endpoint~0.base, ~endpoint~0.offset; [L3799] havoc ~mouse~3.base, ~mouse~3.offset; [L3800] havoc ~input_dev~0.base, ~input_dev~0.offset; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0.base, ~tmp___11~0.offset; [L3808] havoc ~tmp___12~0.base, ~tmp___12~0.offset; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~id.base=4294967327, ~id.offset=4294967392, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3473] havoc ~__mptr~0.base, ~__mptr~0.offset; [L3476] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~intf.base, 68 + ~intf.offset, 8); [L3476] ~__mptr~0.base, ~__mptr~0.offset := #t~mem15.base, #t~mem15.offset; [L3476] havoc #t~mem15.base, #t~mem15.offset; [L3477] #res.base, #res.offset := ~__mptr~0.base, ~__mptr~0.offset - 131; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__mptr~0.base=4294967339, ~__mptr~0.offset=131, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__mptr~0.base=4294967339, ~__mptr~0.offset=131, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71.base, #t~ret71.offset := interface_to_usbdev(~intf.base, ~intf.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret71.base=4294967339, #t~ret71.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~id.base=4294967327, ~id.offset=4294967392, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7.base, ~tmp___7~7.offset := #t~ret71.base, #t~ret71.offset; [L3815] havoc #t~ret71.base, #t~ret71.offset; [L3816] ~dev~1.base, ~dev~1.offset := ~tmp___7~7.base, ~tmp___7~7.offset; [L3817] ~error~0 := -12; [L3818] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~intf.base, 8 + ~intf.offset, 8); [L3818] ~interface~0.base, ~interface~0.offset := #t~mem72.base, #t~mem72.offset; [L3818] havoc #t~mem72.base, #t~mem72.offset; [L3820] call #t~mem73 := read~int(~interface~0.base, 4 + ~interface~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem73=-255, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3820-L3824] assume !(1 != #t~mem73 % 256); [L3820] havoc #t~mem73; [L3826] call #t~mem74.base, #t~mem74.offset := read~$Pointer$(~interface~0.base, 9 + ~interface~0.offset, 8); [L3826] ~endpoint~0.base, ~endpoint~0.offset := #t~mem74.base, #t~mem74.offset; [L3826] havoc #t~mem74.base, #t~mem74.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3419] call #t~mem10 := read~int(~epd.base, 3 + ~epd.offset, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret11=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] assume 0 != ~tmp~1; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd.base, ~epd.offset := #in~epd.base, #in~epd.offset; [L3412] call #t~mem9 := read~int(~epd.base, 2 + ~epd.offset, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd.base, ~epd.offset); VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret12=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] assume 0 != ~tmp___0~0; [L3436] ~tmp___1~0 := 1; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3422-L3445] ensures true; VAL [#in~epd.base=4294967321, #in~epd.offset=0, #NULL.base=0, #NULL.offset=0, #res=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~epd.base=4294967321, ~epd.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0.base, ~endpoint~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret75=1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3829-L3833] assume 0 != ~tmp___8~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] call #t~mem76 := read~int(~endpoint~0.base, 2 + ~endpoint~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem76=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] call #t~mem28 := read~int(~dev.base, ~dev.offset, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~endpoint=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1.base, ~dev~1.offset, #t~mem76 % 256); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~mem76; [L3835] havoc #t~ret77; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev.base, ~udev.offset := #in~udev.base, #in~udev.offset; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0.base, ~ep~0.offset; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev.base=4294967339, ~udev.offset=0] [L3557-L3589] assume !(0 != ~is_out); [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3578-L3584] assume 0 != ~tmp___8~0; [L3580] call warn_slowpath_null(#t~string31.base, #t~string31.offset, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3587] call #t~mem32.base, #t~mem32.offset := read~$Pointer$(~udev.base, 1263 + ~udev.offset + 8 * (~epnum~0 % 4294967296), 8); [L3587] ~ep~0.base, ~ep~0.offset := #t~mem32.base, #t~mem32.offset; [L3587] havoc #t~mem32.base, #t~mem32.offset; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3590-L3594] assume ~ep~0.base == 0 && ~ep~0.offset == 0; [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3547-L3597] ensures true; VAL [#in~is_out=0, #in~pipe=0, #in~udev.base=4294967339, #in~udev.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0.base=0, ~ep~0.offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev.base=4294967339, ~udev.offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1.base, ~dev~1.offset, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret78=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0.base, ~tmp___2~0.offset; [L3390] call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset; [L3390] havoc #t~ret7.base, #t~ret7.offset; [L3392] #res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [#in~flags=4294967345, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0.base=4294967386, ~tmp___2~0.offset=-38] [L3384-L3394] ensures true; VAL [#in~flags=4294967345, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0.base=4294967386, ~tmp___2~0.offset=-38] [L3400] RET call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #t~ret8.base=4294967386, #t~ret8.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset; [L3400] havoc #t~ret8.base, #t~ret8.offset; [L3402] #res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0.base=4294967386, ~tmp~0.offset=-38] [L3395-L3404] ensures true; VAL [#in~flags=208, #in~size=232, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0.base=4294967386, ~tmp~0.offset=-38] [L3839] RET call #t~ret79.base, #t~ret79.offset := kzalloc(232, 208); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret79.base=4294967386, #t~ret79.offset=-38, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0.base, ~tmp___11~0.offset := #t~ret79.base, #t~ret79.offset; [L3839] havoc #t~ret79.base, #t~ret79.offset; [L3840] ~mouse~3.base, ~mouse~3.offset := ~tmp___11~0.base, ~tmp___11~0.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0.base, ~tmp___2~0.offset; [L3390] call #t~ret7.base, #t~ret7.offset := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0.base, ~tmp___2~0.offset := #t~ret7.base, #t~ret7.offset; [L3390] havoc #t~ret7.base, #t~ret7.offset; [L3392] #res.base, #res.offset := ~tmp___2~0.base, ~tmp___2~0.offset; VAL [#in~flags=4294967381, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0.base=4294967339, ~tmp___2~0.offset=-24] [L3384-L3394] ensures true; VAL [#in~flags=4294967381, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0.base=4294967339, ~tmp___2~0.offset=-24] [L3400] RET call #t~ret8.base, #t~ret8.offset := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #t~ret8.base=4294967339, #t~ret8.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0.base, ~tmp~0.offset := #t~ret8.base, #t~ret8.offset; [L3400] havoc #t~ret8.base, #t~ret8.offset; [L3402] #res.base, #res.offset := ~tmp~0.base, ~tmp~0.offset; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0.base=4294967339, ~tmp~0.offset=-24] [L3395-L3404] ensures true; VAL [#in~flags=4294967313, #in~size=1928, #NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0.base=4294967339, ~tmp~0.offset=-24] [L3599] RET call #t~ret34.base, #t~ret34.offset := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL.base=0, #NULL.offset=0, #t~ret34.base=4294967339, #t~ret34.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res.base, #res.offset := #t~ret34.base, #t~ret34.offset; [L3599] havoc #t~ret34.base, #t~ret34.offset; VAL [#NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3598-L3600] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res.base=4294967339, #res.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80.base, #t~ret80.offset := input_allocate_device(); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret80.base=4294967339, #t~ret80.offset=-24, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0.base, ~input_dev~0.offset := #t~ret80.base, #t~ret80.offset; [L3841] havoc #t~ret80.base, #t~ret80.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843-L3850] assume !(~mouse~3.base == 0 && ~mouse~3.offset == 0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846-L3850] assume !(~input_dev~0.base == 0 && ~input_dev~0.offset == 0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset; [L4179] havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; [L4180] havoc ~tmp___7~12.base, ~tmp___7~12.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] assume !false; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] call #t~ret133.base, #t~ret133.offset := ldv_undefined_pointer(); [L4187] ~tmp___7~12.base, ~tmp___7~12.offset := #t~ret133.base, #t~ret133.offset; [L4187] havoc #t~ret133.base, #t~ret133.offset; [L4188] ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~12.base, ~tmp___7~12.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L4190-L4194] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0); [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L4175-L4176] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~dma.base=4294967386, #in~dma.offset=186, #in~mem_flags=32, #in~size=8, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~0.base=4294967386, ~arbitrary_memory~0.offset=66, ~dev.base=4294967339, ~dev.offset=0, ~dma.base=4294967386, ~dma.offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12.base=4294967386, ~tmp___7~12.offset=66] [L3852] RET call #t~ret81.base, #t~ret81.offset := usb_alloc_coherent(~dev~1.base, ~dev~1.offset, 8, 32, ~mouse~3.base, 224 + ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret81.base=4294967386, #t~ret81.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0.base, ~tmp___12~0.offset := #t~ret81.base, #t~ret81.offset; [L3852] havoc #t~ret81.base, #t~ret81.offset; [L3853] call write~$Pointer$(~tmp___12~0.base, ~tmp___12~0.offset, ~mouse~3.base, 216 + ~mouse~3.offset, 8); [L3855] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem82.base=4294967386, #t~mem82.offset=66, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855-L3859] assume !(#t~mem82.base == 0 && #t~mem82.offset == 0); [L3855] havoc #t~mem82.base, #t~mem82.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; [L4243] havoc ~tmp___7~13.base, ~tmp___7~13.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] assume !false; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] call #t~ret134.base, #t~ret134.offset := ldv_undefined_pointer(); [L4250] ~tmp___7~13.base, ~tmp___7~13.offset := #t~ret134.base, #t~ret134.offset; [L4250] havoc #t~ret134.base, #t~ret134.offset; [L4251] ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~13.base, ~tmp___7~13.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L4253-L4257] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0); [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L4240] ensures true; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL.base=0, #NULL.offset=0, #res.base=4294967386, #res.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~arbitrary_memory~1.base=4294967386, ~arbitrary_memory~1.offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13.base=4294967386, ~tmp___7~13.offset=74] [L3861] RET call #t~ret83.base, #t~ret83.offset := usb_alloc_urb(0, 208); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret83.base=4294967386, #t~ret83.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] call write~$Pointer$(#t~ret83.base, #t~ret83.offset, ~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3861] havoc #t~ret83.base, #t~ret83.offset; [L3863] call #t~mem84.base, #t~mem84.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem84.base=4294967386, #t~mem84.offset=74, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863-L3867] assume !(#t~mem84.base == 0 && #t~mem84.offset == 0); [L3863] havoc #t~mem84.base, #t~mem84.offset; [L3868] call write~$Pointer$(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 192 + ~mouse~3.offset, 8); [L3869] call write~$Pointer$(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, 200 + ~mouse~3.offset, 8); [L3870] call #t~mem85.base, #t~mem85.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem85.base=4294967395, #t~mem85.offset=4294967394, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] assume #t~mem85.base != 0 || #t~mem85.offset != 0; [L3870] havoc #t~mem85.base, #t~mem85.offset; [L3872] call #t~mem86.base, #t~mem86.offset := read~$Pointer$(~dev~1.base, 1567 + ~dev~1.offset, 8); [L3872] call #t~ret87 := strlcpy(~mouse~3.base, ~mouse~3.offset, #t~mem86.base, #t~mem86.offset, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86.base, #t~mem86.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] call #t~mem88.base, #t~mem88.offset := read~$Pointer$(~dev~1.base, 1559 + ~dev~1.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem88.base=0, #t~mem88.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] assume !(#t~mem88.base != 0 || #t~mem88.offset != 0); [L3877] havoc #t~mem88.base, #t~mem88.offset; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] assume !(0 != ~tmp___13~0 % 18446744073709551616); [L3898-L3899] havoc #t~nondet95; [L3898] call #t~mem97 := read~int(~dev~1.base, 1237 + ~dev~1.offset, 2); [L3899] call #t~mem98 := read~int(~dev~1.base, 1239 + ~dev~1.offset, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3480-L3495] ~buf.base, ~buf.offset := #in~buf.base, #in~buf.offset; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] call #t~mem18.base, #t~mem18.offset := read~$Pointer$(~dev.base, 60 + ~dev.offset, 8); [L3486] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(#t~mem18.base, 12 + #t~mem18.offset, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem19.base, #t~mem19.offset; [L3486] havoc #t~mem18.base, #t~mem18.offset; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488-L3492] assume ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [L3489] ~tmp___7~1 := -1; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #res=-1, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3480-L3495] ensures true; VAL [#in~buf.base=4294967386, #in~buf.offset=90, #in~dev.base=4294967339, #in~dev.offset=0, #in~size=64, #NULL.base=0, #NULL.offset=0, #res=-1, #t~nondet16=65, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~actual~0=65, ~buf.base=4294967386, ~buf.offset=90, ~dev.base=4294967339, ~dev.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1.base, ~dev~1.offset, ~mouse~3.base, 128 + ~mouse~3.offset, 64); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret99=-1, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] call #t~ret101 := strlcat(~mouse~3.base, 128 + ~mouse~3.offset, #t~string100.base, #t~string100.offset, 64); [L3904] havoc #t~ret101; [L3905] call write~$Pointer$(~mouse~3.base, ~mouse~3.offset, ~input_dev~0.base, ~input_dev~0.offset, 8); [L3906] call write~$Pointer$(~mouse~3.base, 128 + ~mouse~3.offset, ~input_dev~0.base, 8 + ~input_dev~0.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3659-L3669] ~id.base, ~id.offset := #in~id.base, #in~id.offset; [L3663] call write~int(3, ~id.base, ~id.offset, 2); [L3664] call #t~mem39 := read~int(~dev.base, 1237 + ~dev.offset, 2); [L3664] call write~int(#t~mem39, ~id.base, 2 + ~id.offset, 2); [L3664] havoc #t~mem39; [L3665] call #t~mem40 := read~int(~dev.base, 1239 + ~dev.offset, 2); [L3665] call write~int(#t~mem40, ~id.base, 4 + ~id.offset, 2); [L3665] havoc #t~mem40; [L3666] call #t~mem41 := read~int(~dev.base, 1241 + ~dev.offset, 2); [L3666] call write~int(#t~mem41, ~id.base, 6 + ~id.offset, 2); [L3666] havoc #t~mem41; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~id.base=4294967339, ~id.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ensures true; VAL [#in~dev.base=4294967339, #in~dev.offset=0, #in~id.base=4294967339, #in~id.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev.base=4294967339, ~dev.offset=0, ~id.base=4294967339, ~id.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1.base, ~dev~1.offset, ~input_dev~0.base, 24 + ~input_dev~0.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] call write~$Pointer$(~intf.base, 68 + ~intf.offset, ~input_dev~0.base, 798 + ~input_dev~0.offset, 8); [L3909] call write~int(~bitwiseOr(2, 4), ~input_dev~0.base, 40 + ~input_dev~0.offset, 8); [L3910] call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3911] call write~int(~bitwiseOr(1, 2), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3912] call #t~mem102 := read~int(~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3912] call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), ~input_dev~0.base, 80 + ~input_dev~0.offset, 8); [L3912] havoc #t~mem102; [L3913] call #t~mem103 := read~int(~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3913] call write~int(~bitwiseOr(#t~mem103, 256), ~input_dev~0.base, 144 + ~input_dev~0.offset, 8); [L3913] havoc #t~mem103; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3613-L3622] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3618] call #t~ret36 := dev_set_drvdata(~dev.base, 798 + ~dev.offset, ~data.base, ~data.offset); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~dev.base=4294967339, ~dev.offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ensures true; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~dev.base=4294967339, #in~dev.offset=-24, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~dev.base=4294967339, ~dev.offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0.base, ~input_dev~0.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] call write~$Pointer$(#funAddr~usb_mouse_open.base, #funAddr~usb_mouse_open.offset, ~input_dev~0.base, 536 + ~input_dev~0.offset, 8); [L3916] call write~$Pointer$(#funAddr~usb_mouse_close.base, #funAddr~usb_mouse_close.offset, ~input_dev~0.base, 544 + ~input_dev~0.offset, 8); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918-L3922] assume !(~maxp~0 > 8); [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] call #t~mem104.base, #t~mem104.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3924] call #t~mem105.base, #t~mem105.offset := read~$Pointer$(~mouse~3.base, 216 + ~mouse~3.offset, 8); [L3925] call #t~mem106 := read~int(~endpoint~0.base, 6 + ~endpoint~0.offset, 1); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem104.base=4294967386, #t~mem104.offset=74, #t~mem105.base=4294967386, #t~mem105.offset=66, #t~mem106=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb.base, ~urb.offset := #in~urb.base, #in~urb.offset; [L3508-L3532] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer.base, ~transfer_buffer.offset := #in~transfer_buffer.base, #in~transfer_buffer.offset; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn.base, ~complete_fn.offset := #in~complete_fn.base, #in~complete_fn.offset; [L3508-L3532] ~context.base, ~context.offset := #in~context.base, #in~context.offset; [L3508-L3532] ~interval := #in~interval; [L3515] call write~$Pointer$(~dev.base, ~dev.offset, ~urb.base, 64 + ~urb.offset, 8); [L3516] call write~int(~pipe, ~urb.base, 80 + ~urb.offset, 4); [L3517] call write~$Pointer$(~transfer_buffer.base, ~transfer_buffer.offset, ~urb.base, 96 + ~urb.offset, 8); [L3518] call write~int(~buffer_length, ~urb.base, 124 + ~urb.offset, 4); [L3519] call write~$Pointer$(~complete_fn.base, ~complete_fn.offset, ~urb.base, 172 + ~urb.offset, 8); [L3520] call write~$Pointer$(~context.base, ~context.offset, ~urb.base, 164 + ~urb.offset, 8); [L3521] call #t~mem26 := read~int(~dev.base, 28 + ~dev.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~mem26=4294967299, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3521-L3528] assume 3 == #t~mem26 % 4294967296; [L3521] havoc #t~mem26; [L3522] call write~int(~shiftLeft(1, ~interval - 1), ~urb.base, 156 + ~urb.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3529] call write~int(-1, ~urb.base, 148 + ~urb.offset, 4); VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3508-L3532] ensures true; VAL [#in~buffer_length=0, #in~complete_fn.base=-1, #in~complete_fn.offset=2, #in~context.base=4294967386, #in~context.offset=-38, #in~dev.base=4294967339, #in~dev.offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer.base=4294967386, #in~transfer_buffer.offset=66, #in~urb.base=4294967386, #in~urb.offset=74, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~buffer_length=0, ~complete_fn.base=-1, ~complete_fn.offset=2, ~context.base=4294967386, ~context.offset=-38, ~dev.base=4294967339, ~dev.offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer.base=4294967386, ~transfer_buffer.offset=66, ~urb.base=4294967386, ~urb.offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104.base, #t~mem104.offset, ~dev~1.base, ~dev~1.offset, ~pipe~0, #t~mem105.base, #t~mem105.offset, ~tmp___14~0, #funAddr~usb_mouse_irq.base, #funAddr~usb_mouse_irq.offset, ~mouse~3.base, ~mouse~3.offset, #t~mem106 % 256); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem104.base=4294967386, #t~mem104.offset=74, #t~mem105.base=4294967386, #t~mem105.offset=66, #t~mem106=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=-12, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] havoc #t~mem105.base, #t~mem105.offset; [L3925] havoc #t~mem106; [L3924] havoc #t~mem104.base, #t~mem104.offset; [L3926] call #t~mem107.base, #t~mem107.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3926] call #t~mem108 := read~int(~mouse~3.base, 224 + ~mouse~3.offset, 8); [L3926] call write~int(#t~mem108, #t~mem107.base, 104 + #t~mem107.offset, 8); [L3926] havoc #t~mem108; [L3926] havoc #t~mem107.base, #t~mem107.offset; [L3927] call #t~mem109.base, #t~mem109.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3927] call #t~mem110.base, #t~mem110.offset := read~$Pointer$(~mouse~3.base, 208 + ~mouse~3.offset, 8); [L3927] call #t~mem111 := read~int(#t~mem110.base, 92 + #t~mem110.offset, 4); [L3927] call write~int(~bitwiseOr(#t~mem111, 4), #t~mem109.base, 92 + #t~mem109.offset, 4); [L3927] havoc #t~mem110.base, #t~mem110.offset; [L3927] havoc #t~mem109.base, #t~mem109.offset; [L3927] havoc #t~mem111; [L3928] call #t~mem112.base, #t~mem112.offset := read~$Pointer$(~mouse~3.base, 200 + ~mouse~3.offset, 8); [L3928] call #t~ret113 := input_register_device(#t~mem112.base, #t~mem112.offset); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~mem112.base, #t~mem112.offset; [L3928] havoc #t~ret113; [L3929] ~error~0 := ~tmp~2; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] assume !(0 != ~error~0); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3462-L3471] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3467] call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3461] ensures true; VAL [#in~data.base=4294967386, #in~data.offset=-38, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=4294967386, ~data.offset=-38, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf.base, ~intf.offset, ~mouse~3.base, ~mouse~3.offset); VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3794-L3955] ensures true; VAL [#in~id.base=4294967327, #in~id.offset=4294967392, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~dev~1.base=4294967339, ~dev~1.offset=0, ~endpoint~0.base=4294967321, ~endpoint~0.offset=0, ~error~0=0, ~id.base=4294967327, ~id.offset=4294967392, ~input_dev~0.base=4294967339, ~input_dev~0.offset=-24, ~interface~0.base=4294967330, ~interface~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3.base=4294967386, ~mouse~3.offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0.base=4294967386, ~tmp___11~0.offset=-38, ~tmp___12~0.base=4294967386, ~tmp___12~0.offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7.base=4294967339, ~tmp___7~7.offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0.base, ~var_group1~0.offset, ~var_usb_mouse_probe_3_p1~0.base, ~var_usb_mouse_probe_3_p1~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret132=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4114-L4118] assume !(0 != ~res_usb_mouse_probe_3~0); [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4089-L4096] assume 0 != ~tmp___9~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4100-L4139] assume !(0 == ~tmp___8~4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4103-L4139] assume 1 == ~tmp___8~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4125-L4132] assume 1 == ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3957] havoc ~mouse~4.base, ~mouse~4.offset; [L3958] havoc ~tmp___7~8.base, ~tmp___7~8.offset; [L3959] havoc ~tmp___8~3.base, ~tmp___8~3.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3451] havoc ~tmp___7~0.base, ~tmp___7~0.offset; [L3455] call #t~ret13.base, #t~ret13.offset := dev_get_drvdata(~intf.base, 68 + ~intf.offset); [L3455] ~tmp___7~0.base, ~tmp___7~0.offset := #t~ret13.base, #t~ret13.offset; [L3455] havoc #t~ret13.base, #t~ret13.offset; [L3457] #res.base, #res.offset := ~tmp___7~0.base, ~tmp___7~0.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0.base=0, ~tmp___7~0.offset=0] [L3449] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0.base=0, ~tmp___7~0.offset=0] [L3963] RET call #t~ret117.base, #t~ret117.offset := usb_get_intfdata(~intf.base, ~intf.offset); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret117.base=0, #t~ret117.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8.base, ~tmp___7~8.offset := #t~ret117.base, #t~ret117.offset; [L3963] havoc #t~ret117.base, #t~ret117.offset; [L3964] ~mouse~4.base, ~mouse~4.offset := ~tmp___7~8.base, ~tmp___7~8.offset; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3965] CALL call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf.base, ~intf.offset := #in~intf.base, #in~intf.offset; [L3462-L3471] ~data.base, ~data.offset := #in~data.base, #in~data.offset; [L3467] call #t~ret14 := dev_set_drvdata(~intf.base, 68 + ~intf.offset, ~data.base, ~data.offset); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=0, ~data.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3461] ensures true; VAL [#in~data.base=0, #in~data.offset=0, #in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~data.base=0, ~data.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf.base, ~intf.offset, 0, 0); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3967-L3978] assume !(~mouse~4.base != 0 || ~mouse~4.offset != 0); VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L3956-L3981] ensures true; VAL [#in~intf.base=4294967302, #in~intf.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~intf.base=4294967302, ~intf.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4.base=0, ~mouse~4.offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8.base=0, ~tmp___7~8.offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0.base, ~var_group1~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4084-L4140] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4089-L4096] assume !(0 != ~tmp___9~1); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4092-L4096] assume !!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] call usb_deregister(~#usb_mouse_driver~0.base, ~#usb_mouse_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4026] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0.base=4294967302, ~var_group1~0.offset=0, ~var_usb_mouse_probe_3_p1~0.base=4294967327, ~var_usb_mouse_probe_3_p1~0.offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308-L4314] assume !(0 == ~ldv_urb_state~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=4294967368, #t~string100.offset=0, #t~string124.base=4294967385, #t~string124.offset=0, #t~string127.base=4294967356, #t~string127.offset=0, #t~string17.base=4294967397, #t~string17.offset=0, #t~string23.base=4294967326, #t~string23.offset=0, #t~string29.base=4294967328, #t~string29.offset=0, #t~string31.base=4294967407, #t~string31.offset=0, #t~string59.base=4294967307, #t~string59.offset=0, #t~string90.base=1, #t~string90.offset=0, #t~string96.base=4294967312, #t~string96.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0.base=4294967340, ~#usb_mouse_driver~0.offset=0, ~#usb_mouse_id_table~0.base=4294967373, ~#usb_mouse_id_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=4294967320, #NULL!offset=4294967400, #t~string100!base=4294967367, #t~string100!offset=4294967349, #t~string124!base=4294967303, #t~string124!offset=4294967358, #t~string127!base=4294967357, #t~string127!offset=4294967323, #t~string17!base=4294967399, #t~string17!offset=4294967365, #t~string23!base=4294967325, #t~string23!offset=4294967311, #t~string29!base=4294967322, #t~string29!offset=4294967352, #t~string31!base=4294967406, #t~string31!offset=4294967383, #t~string59!base=4294967308, #t~string59!offset=4294967360, #t~string90!base=4294967309, #t~string90!offset=4294967370, #t~string96!base=4294967314, #t~string96!offset=4294967369, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967387, ~#usb_mouse_driver~0!offset=4294967347, ~#usb_mouse_id_table~0!base=4294967306, ~#usb_mouse_id_table~0!offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3486] FCALL call #t~string17 := #Ultimate.alloc(10); [L3502] FCALL call #t~string23 := #Ultimate.alloc(9); [L3564] FCALL call #t~string29 := #Ultimate.alloc(20); [L3580] FCALL call #t~string31 := #Ultimate.alloc(20); [L3752] FCALL call #t~string59 := #Ultimate.alloc(59); [L3880] FCALL call #t~string90 := #Ultimate.alloc(2); [L3880] FCALL call write~init~int(32, { base: #t~string90!base, offset: #t~string90!offset }, 1); [L3880] FCALL call write~init~int(0, { base: #t~string90!base, offset: 1 + #t~string90!offset }, 1); [L3898] FCALL call #t~string96 := #Ultimate.alloc(26); [L3904] FCALL call #t~string100 := #Ultimate.alloc(8); [L3988] FCALL call #t~string124 := #Ultimate.alloc(9); [L4017] FCALL call #t~string127 := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0[0] := 97; [L3670-L3681] ~__mod_author48~0[1] := 117; [L3670-L3681] ~__mod_author48~0[2] := 116; [L3670-L3681] ~__mod_author48~0[3] := 104; [L3670-L3681] ~__mod_author48~0[4] := 111; [L3670-L3681] ~__mod_author48~0[5] := 114; [L3670-L3681] ~__mod_author48~0[6] := 61; [L3670-L3681] ~__mod_author48~0[7] := 86; [L3670-L3681] ~__mod_author48~0[8] := 111; [L3670-L3681] ~__mod_author48~0[9] := 106; [L3670-L3681] ~__mod_author48~0[10] := 116; [L3670-L3681] ~__mod_author48~0[11] := 101; [L3670-L3681] ~__mod_author48~0[12] := 99; [L3670-L3681] ~__mod_author48~0[13] := 104; [L3670-L3681] ~__mod_author48~0[14] := 32; [L3670-L3681] ~__mod_author48~0[15] := 80; [L3670-L3681] ~__mod_author48~0[16] := 97; [L3670-L3681] ~__mod_author48~0[17] := 118; [L3670-L3681] ~__mod_author48~0[18] := 108; [L3670-L3681] ~__mod_author48~0[19] := 105; [L3670-L3681] ~__mod_author48~0[20] := 107; [L3670-L3681] ~__mod_author48~0[21] := 32; [L3670-L3681] ~__mod_author48~0[22] := 60; [L3670-L3681] ~__mod_author48~0[23] := 118; [L3670-L3681] ~__mod_author48~0[24] := 111; [L3670-L3681] ~__mod_author48~0[25] := 106; [L3670-L3681] ~__mod_author48~0[26] := 116; [L3670-L3681] ~__mod_author48~0[27] := 101; [L3670-L3681] ~__mod_author48~0[28] := 99; [L3670-L3681] ~__mod_author48~0[29] := 104; [L3670-L3681] ~__mod_author48~0[30] := 64; [L3670-L3681] ~__mod_author48~0[31] := 117; [L3670-L3681] ~__mod_author48~0[32] := 99; [L3670-L3681] ~__mod_author48~0[33] := 119; [L3670-L3681] ~__mod_author48~0[34] := 46; [L3670-L3681] ~__mod_author48~0[35] := 99; [L3670-L3681] ~__mod_author48~0[36] := 122; [L3670-L3681] ~__mod_author48~0[37] := 62; [L3670-L3681] ~__mod_author48~0[38] := 0; [L3682-L3695] ~__mod_description49~0[0] := 100; [L3682-L3695] ~__mod_description49~0[1] := 101; [L3682-L3695] ~__mod_description49~0[2] := 115; [L3682-L3695] ~__mod_description49~0[3] := 99; [L3682-L3695] ~__mod_description49~0[4] := 114; [L3682-L3695] ~__mod_description49~0[5] := 105; [L3682-L3695] ~__mod_description49~0[6] := 112; [L3682-L3695] ~__mod_description49~0[7] := 116; [L3682-L3695] ~__mod_description49~0[8] := 105; [L3682-L3695] ~__mod_description49~0[9] := 111; [L3682-L3695] ~__mod_description49~0[10] := 110; [L3682-L3695] ~__mod_description49~0[11] := 61; [L3682-L3695] ~__mod_description49~0[12] := 85; [L3682-L3695] ~__mod_description49~0[13] := 83; [L3682-L3695] ~__mod_description49~0[14] := 66; [L3682-L3695] ~__mod_description49~0[15] := 32; [L3682-L3695] ~__mod_description49~0[16] := 72; [L3682-L3695] ~__mod_description49~0[17] := 73; [L3682-L3695] ~__mod_description49~0[18] := 68; [L3682-L3695] ~__mod_description49~0[19] := 32; [L3682-L3695] ~__mod_description49~0[20] := 66; [L3682-L3695] ~__mod_description49~0[21] := 111; [L3682-L3695] ~__mod_description49~0[22] := 111; [L3682-L3695] ~__mod_description49~0[23] := 116; [L3682-L3695] ~__mod_description49~0[24] := 32; [L3682-L3695] ~__mod_description49~0[25] := 80; [L3682-L3695] ~__mod_description49~0[26] := 114; [L3682-L3695] ~__mod_description49~0[27] := 111; [L3682-L3695] ~__mod_description49~0[28] := 116; [L3682-L3695] ~__mod_description49~0[29] := 111; [L3682-L3695] ~__mod_description49~0[30] := 99; [L3682-L3695] ~__mod_description49~0[31] := 111; [L3682-L3695] ~__mod_description49~0[32] := 108; [L3682-L3695] ~__mod_description49~0[33] := 32; [L3682-L3695] ~__mod_description49~0[34] := 109; [L3682-L3695] ~__mod_description49~0[35] := 111; [L3682-L3695] ~__mod_description49~0[36] := 117; [L3682-L3695] ~__mod_description49~0[37] := 115; [L3682-L3695] ~__mod_description49~0[38] := 101; [L3682-L3695] ~__mod_description49~0[39] := 32; [L3682-L3695] ~__mod_description49~0[40] := 100; [L3682-L3695] ~__mod_description49~0[41] := 114; [L3682-L3695] ~__mod_description49~0[42] := 105; [L3682-L3695] ~__mod_description49~0[43] := 118; [L3682-L3695] ~__mod_description49~0[44] := 101; [L3682-L3695] ~__mod_description49~0[45] := 114; [L3682-L3695] ~__mod_description49~0[46] := 0; [L3696-L3700] ~__mod_license50~0[0] := 108; [L3696-L3700] ~__mod_license50~0[1] := 105; [L3696-L3700] ~__mod_license50~0[2] := 99; [L3696-L3700] ~__mod_license50~0[3] := 101; [L3696-L3700] ~__mod_license50~0[4] := 110; [L3696-L3700] ~__mod_license50~0[5] := 115; [L3696-L3700] ~__mod_license50~0[6] := 101; [L3696-L3700] ~__mod_license50~0[7] := 61; [L3696-L3700] ~__mod_license50~0[8] := 71; [L3696-L3700] ~__mod_license50~0[9] := 80; [L3696-L3700] ~__mod_license50~0[10] := 76; [L3696-L3700] ~__mod_license50~0[11] := 0; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] FCALL call ~#usb_mouse_id_table~0 := #Ultimate.alloc(24); [L3982-L3984] FCALL call write~init~int(896, { base: ~#usb_mouse_id_table~0!base, offset: ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 2 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 4 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 6 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 8 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 10 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 11 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 12 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(3, { base: ~#usb_mouse_id_table~0!base, offset: 13 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(1, { base: ~#usb_mouse_id_table~0!base, offset: 14 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(2, { base: ~#usb_mouse_id_table~0!base, offset: 15 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 16 + ~#usb_mouse_id_table~0!offset }, 8); [L3987-L4003] FCALL call ~#usb_mouse_driver~0 := #Ultimate.alloc(281); [L3987-L4003] FCALL call write~init~$Pointer$(#t~string124, { base: ~#usb_mouse_driver~0!base, offset: ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_probe, { base: ~#usb_mouse_driver~0!base, offset: 8 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_disconnect, { base: ~#usb_mouse_driver~0!base, offset: 16 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 24 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 32 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 40 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 48 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 56 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 64 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(~#usb_mouse_id_table~0, { base: ~#usb_mouse_driver~0!base, offset: 72 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 80 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 84 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 88 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 92 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 100 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 108 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 116 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 124 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 132 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 136 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 144 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 152 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 160 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 168 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 176 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 184 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 192 + ~#usb_mouse_driver~0!offset }, 1); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 193 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 201 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 209 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 217 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 225 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 233 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 241 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 249 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 257 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 265 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 269 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 273 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 277 + ~#usb_mouse_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0; [L4065] havoc ~var_usb_mouse_probe_3_p1~0; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver := #in~driver; [L3498] havoc ~tmp___7~2; [L3502] FCALL call #t~ret24 := usb_register_driver(~driver, ~#__this_module~0, #t~string23); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~driver!base=4294967340, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret125=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015] COND TRUE 0 == ~retval~0 [L4017] havoc #t~nondet126; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret129=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] COND FALSE !(0 != ~tmp___7~11) [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [L3682-L3695] ~__mod_description49~0[39] := 32; [L3682-L3695] ~__mod_description49~0[40] := 100; [L3682-L3695] ~__mod_description49~0[41] := 114; [L3682-L3695] ~__mod_description49~0[42] := 105; [L3682-L3695] ~__mod_description49~0[43] := 118; [L3682-L3695] ~__mod_description49~0[44] := 101; [L3682-L3695] ~__mod_description49~0[45] := 114; [L3682-L3695] ~__mod_description49~0[46] := 0; [L3696-L3700] ~__mod_license50~0[0] := 108; [L3696-L3700] ~__mod_license50~0[1] := 105; [L3696-L3700] ~__mod_license50~0[2] := 99; [L3696-L3700] ~__mod_license50~0[3] := 101; [L3696-L3700] ~__mod_license50~0[4] := 110; [L3696-L3700] ~__mod_license50~0[5] := 115; [L3696-L3700] ~__mod_license50~0[6] := 101; [L3696-L3700] ~__mod_license50~0[7] := 61; [L3696-L3700] ~__mod_license50~0[8] := 71; [L3696-L3700] ~__mod_license50~0[9] := 80; [L3696-L3700] ~__mod_license50~0[10] := 76; [L3696-L3700] ~__mod_license50~0[11] := 0; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] FCALL call ~#usb_mouse_id_table~0 := #Ultimate.alloc(24); [L3982-L3984] FCALL call write~init~int(896, { base: ~#usb_mouse_id_table~0!base, offset: ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 2 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 4 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 6 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 8 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 10 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 11 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 12 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(3, { base: ~#usb_mouse_id_table~0!base, offset: 13 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(1, { base: ~#usb_mouse_id_table~0!base, offset: 14 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(2, { base: ~#usb_mouse_id_table~0!base, offset: 15 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 16 + ~#usb_mouse_id_table~0!offset }, 8); [L3987-L4003] FCALL call ~#usb_mouse_driver~0 := #Ultimate.alloc(281); [L3987-L4003] FCALL call write~init~$Pointer$(#t~string124, { base: ~#usb_mouse_driver~0!base, offset: ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_probe, { base: ~#usb_mouse_driver~0!base, offset: 8 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_disconnect, { base: ~#usb_mouse_driver~0!base, offset: 16 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 24 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 32 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 40 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 48 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 56 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 64 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(~#usb_mouse_id_table~0, { base: ~#usb_mouse_driver~0!base, offset: 72 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 80 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 84 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 88 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 92 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 100 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 108 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 116 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 124 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 132 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 136 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 144 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 152 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 160 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 168 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 176 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 184 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 192 + ~#usb_mouse_driver~0!offset }, 1); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 193 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 201 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 209 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 217 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 225 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 233 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 241 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 249 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 257 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 265 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 269 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 273 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 277 + ~#usb_mouse_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0; [L4065] havoc ~var_usb_mouse_probe_3_p1~0; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver := #in~driver; [L3498] havoc ~tmp___7~2; [L3502] FCALL call #t~ret24 := usb_register_driver(~driver, ~#__this_module~0, #t~string23); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~driver!base=4294967340, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret125=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015] COND TRUE 0 == ~retval~0 [L4017] havoc #t~nondet126; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret129=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] COND FALSE !(0 != ~tmp___7~11) [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100] COND TRUE 0 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109] COND TRUE 0 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf := #in~intf; [L3794-L3955] ~id := #in~id; [L3795] havoc ~dev~1; [L3796] havoc ~tmp___7~7; [L3797] havoc ~interface~0; [L3798] havoc ~endpoint~0; [L3799] havoc ~mouse~3; [L3800] havoc ~input_dev~0; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0; [L3808] havoc ~tmp___12~0; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf := #in~intf; [L3473] havoc ~__mptr~0; [L3476] FCALL call #t~mem15 := read~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, 8); [L3476] ~__mptr~0 := #t~mem15; [L3476] havoc #t~mem15; [L3477] #res := { base: ~__mptr~0!base, offset: ~__mptr~0!offset - 131 }; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__mptr~0!base=4294967339, ~__mptr~0!offset=131, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret71!base=4294967339, #t~ret71!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7 := #t~ret71; [L3815] havoc #t~ret71; [L3816] ~dev~1 := ~tmp___7~7; [L3817] ~error~0 := -12; [L3818] FCALL call #t~mem72 := read~$Pointer$({ base: ~intf!base, offset: 8 + ~intf!offset }, 8); [L3818] ~interface~0 := #t~mem72; [L3818] havoc #t~mem72; [L3820] FCALL call #t~mem73 := read~int({ base: ~interface~0!base, offset: 4 + ~interface~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem73=-255, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3820] COND FALSE !(1 != #t~mem73 % 256) [L3820] havoc #t~mem73; [L3826] FCALL call #t~mem74 := read~$Pointer$({ base: ~interface~0!base, offset: 9 + ~interface~0!offset }, 8); [L3826] ~endpoint~0 := { base: #t~mem74!base, offset: #t~mem74!offset }; [L3826] havoc #t~mem74; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd := #in~epd; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd := #in~epd; [L3419] FCALL call #t~mem10 := read~int({ base: ~epd!base, offset: 3 + ~epd!offset }, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret11=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] COND TRUE 0 != ~tmp~1 VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd := #in~epd; [L3412] FCALL call #t~mem9 := read~int({ base: ~epd!base, offset: 2 + ~epd!offset }, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret12=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] COND TRUE 0 != ~tmp___0~0 [L3436] ~tmp___1~0 := 1; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret75=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3829-L3833] COND TRUE 0 != ~tmp___8~2 VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] FCALL call #t~mem76 := read~int({ base: ~endpoint~0!base, offset: 2 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev := #in~dev; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] FCALL call #t~mem28 := read~int({ base: ~dev!base, offset: ~dev!offset }, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~mem76; [L3835] havoc #t~ret77; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev := #in~udev; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev!base=4294967339, ~udev!offset=0] [L3557-L3589] COND FALSE !(0 != ~is_out) [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3578-L3584] COND TRUE 0 != ~tmp___8~0 [L3580] FCALL call warn_slowpath_null(#t~string31, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3587] FCALL call #t~mem32 := read~$Pointer$({ base: ~udev!base, offset: 1263 + ~udev!offset + 8 * (~epnum~0 % 4294967296) }, 8); [L3587] ~ep~0 := #t~mem32; [L3587] havoc #t~mem32; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3590] COND TRUE ~ep~0 == { base: 0, offset: 0 } [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret78=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79 := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967345, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0!base=4294967386, ~tmp___2~0!offset=-38] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967386, #t~ret8!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0!base=4294967386, ~tmp~0!offset=-38] [L3839] RET call #t~ret79 := kzalloc(232, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret79!base=4294967386, #t~ret79!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0 := #t~ret79; [L3839] havoc #t~ret79; [L3840] ~mouse~3 := ~tmp___11~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80 := input_allocate_device(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967381, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0!base=4294967339, ~tmp___2~0!offset=-24] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967339, #t~ret8!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0!base=4294967339, ~tmp~0!offset=-24] [L3599] RET call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL!base=0, #NULL!offset=0, #t~ret34!base=4294967339, #t~ret34!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res := #t~ret34; [L3599] havoc #t~ret34; VAL [#NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80 := input_allocate_device(); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret80!base=4294967339, #t~ret80!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0 := #t~ret80; [L3841] havoc #t~ret80; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843] COND FALSE !(~mouse~3 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846] COND FALSE !(~input_dev~0 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev := #in~dev; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma := #in~dma; [L4179] havoc ~arbitrary_memory~0; [L4180] havoc ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] COND FALSE !(false) VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] FCALL call #t~ret133 := ldv_undefined_pointer(); [L4187] ~tmp___7~12 := #t~ret133; [L4187] havoc #t~ret133; [L4188] ~arbitrary_memory~0 := ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L4190] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res := ~arbitrary_memory~0; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L3852] RET call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret81!base=4294967386, #t~ret81!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0 := #t~ret81; [L3852] havoc #t~ret81; [L3853] FCALL call write~$Pointer$(~tmp___12~0, { base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3855] FCALL call #t~mem82 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=4294967386, #t~mem82!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855] COND FALSE !(#t~mem82 == { base: 0, offset: 0 }) [L3855] havoc #t~mem82; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1; [L4243] havoc ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] COND FALSE !(false) VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] FCALL call #t~ret134 := ldv_undefined_pointer(); [L4250] ~tmp___7~13 := #t~ret134; [L4250] havoc #t~ret134; [L4251] ~arbitrary_memory~1 := ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L4253] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res := ~arbitrary_memory~1; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L3861] RET call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret83!base=4294967386, #t~ret83!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] FCALL call write~$Pointer$(#t~ret83, { base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3861] havoc #t~ret83; [L3863] FCALL call #t~mem84 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem84!base=4294967386, #t~mem84!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863] COND FALSE !(#t~mem84 == { base: 0, offset: 0 }) [L3863] havoc #t~mem84; [L3868] FCALL call write~$Pointer$(~dev~1, { base: ~mouse~3!base, offset: 192 + ~mouse~3!offset }, 8); [L3869] FCALL call write~$Pointer$(~input_dev~0, { base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3870] FCALL call #t~mem85 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem85!base=4294967395, #t~mem85!offset=4294967394, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] COND TRUE #t~mem85 != { base: 0, offset: 0 } [L3870] havoc #t~mem85; [L3872] FCALL call #t~mem86 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); [L3872] FCALL call #t~ret87 := strlcpy({ base: ~mouse~3!base, offset: ~mouse~3!offset }, #t~mem86, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] FCALL call #t~mem88 := read~$Pointer$({ base: ~dev~1!base, offset: 1559 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem88!base=0, #t~mem88!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] COND FALSE !(#t~mem88 != { base: 0, offset: 0 }) [L3877] havoc #t~mem88; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] COND FALSE !(0 != ~tmp___13~0 % 18446744073709551616) [L3898-L3899] havoc #t~nondet95; [L3898] FCALL call #t~mem97 := read~int({ base: ~dev~1!base, offset: 1237 + ~dev~1!offset }, 2); [L3899] FCALL call #t~mem98 := read~int({ base: ~dev~1!base, offset: 1239 + ~dev~1!offset }, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev := #in~dev; [L3480-L3495] ~buf := #in~buf; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] FCALL call #t~mem18 := read~$Pointer$({ base: ~dev!base, offset: 60 + ~dev!offset }, 8); [L3486] FCALL call #t~mem19 := read~$Pointer$({ base: #t~mem18!base, offset: 12 + #t~mem18!offset }, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem19; [L3486] havoc #t~mem18; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488] COND TRUE ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296) [L3489] ~tmp___7~1 := -1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #res=-1, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret99=-1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] FCALL call #t~ret101 := strlcat({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, #t~string100, 64); [L3904] havoc #t~ret101; [L3905] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: ~mouse~3!offset }, { base: ~input_dev~0!base, offset: ~input_dev~0!offset }, 8); [L3906] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, { base: ~input_dev~0!base, offset: 8 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev := #in~dev; [L3659-L3669] ~id := #in~id; [L3663] FCALL call write~int(3, { base: ~id!base, offset: ~id!offset }, 2); [L3664] FCALL call #t~mem39 := read~int({ base: ~dev!base, offset: 1237 + ~dev!offset }, 2); [L3664] FCALL call write~int(#t~mem39, { base: ~id!base, offset: 2 + ~id!offset }, 2); [L3664] havoc #t~mem39; [L3665] FCALL call #t~mem40 := read~int({ base: ~dev!base, offset: 1239 + ~dev!offset }, 2); [L3665] FCALL call write~int(#t~mem40, { base: ~id!base, offset: 4 + ~id!offset }, 2); [L3665] havoc #t~mem40; [L3666] FCALL call #t~mem41 := read~int({ base: ~dev!base, offset: 1241 + ~dev!offset }, 2); [L3666] FCALL call write~int(#t~mem41, { base: ~id!base, offset: 6 + ~id!offset }, 2); [L3666] havoc #t~mem41; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~id!base=4294967339, ~id!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] FCALL call write~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, { base: ~input_dev~0!base, offset: 798 + ~input_dev~0!offset }, 8); [L3909] FCALL call write~int(~bitwiseOr(2, 4), { base: ~input_dev~0!base, offset: 40 + ~input_dev~0!offset }, 8); [L3910] FCALL call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3911] FCALL call write~int(~bitwiseOr(1, 2), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3912] FCALL call #t~mem102 := read~int({ base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] FCALL call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] havoc #t~mem102; [L3913] FCALL call #t~mem103 := read~int({ base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] FCALL call write~int(~bitwiseOr(#t~mem103, 256), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] havoc #t~mem103; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev := #in~dev; [L3613-L3622] ~data := #in~data; [L3618] FCALL call #t~ret36 := dev_set_drvdata({ base: ~dev!base, offset: 798 + ~dev!offset }, ~data); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~dev!base=4294967339, ~dev!offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] FCALL call write~$Pointer$(#funAddr~usb_mouse_open, { base: ~input_dev~0!base, offset: 536 + ~input_dev~0!offset }, 8); [L3916] FCALL call write~$Pointer$(#funAddr~usb_mouse_close, { base: ~input_dev~0!base, offset: 544 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918] COND FALSE !(~maxp~0 > 8) [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] FCALL call #t~mem104 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3924] FCALL call #t~mem105 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3925] FCALL call #t~mem106 := read~int({ base: ~endpoint~0!base, offset: 6 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb := #in~urb; [L3508-L3532] ~dev := #in~dev; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer := #in~transfer_buffer; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn := #in~complete_fn; [L3508-L3532] ~context := #in~context; [L3508-L3532] ~interval := #in~interval; [L3515] FCALL call write~$Pointer$(~dev, { base: ~urb!base, offset: 64 + ~urb!offset }, 8); [L3516] FCALL call write~int(~pipe, { base: ~urb!base, offset: 80 + ~urb!offset }, 4); [L3517] FCALL call write~$Pointer$(~transfer_buffer, { base: ~urb!base, offset: 96 + ~urb!offset }, 8); [L3518] FCALL call write~int(~buffer_length, { base: ~urb!base, offset: 124 + ~urb!offset }, 4); [L3519] FCALL call write~$Pointer$(~complete_fn, { base: ~urb!base, offset: 172 + ~urb!offset }, 8); [L3520] FCALL call write~$Pointer$(~context, { base: ~urb!base, offset: 164 + ~urb!offset }, 8); [L3521] FCALL call #t~mem26 := read~int({ base: ~dev!base, offset: 28 + ~dev!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~mem26=4294967299, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3521] COND TRUE 3 == #t~mem26 % 4294967296 [L3521] havoc #t~mem26; [L3522] FCALL call write~int(~shiftLeft(1, ~interval - 1), { base: ~urb!base, offset: 156 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3529] FCALL call write~int(-1, { base: ~urb!base, offset: 148 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] havoc #t~mem105; [L3925] havoc #t~mem106; [L3924] havoc #t~mem104; [L3926] FCALL call #t~mem107 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3926] FCALL call #t~mem108 := read~int({ base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }, 8); [L3926] FCALL call write~int(#t~mem108, { base: #t~mem107!base, offset: 104 + #t~mem107!offset }, 8); [L3926] havoc #t~mem108; [L3926] havoc #t~mem107; [L3927] FCALL call #t~mem109 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem110 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem111 := read~int({ base: #t~mem110!base, offset: 92 + #t~mem110!offset }, 4); [L3927] FCALL call write~int(~bitwiseOr(#t~mem111, 4), { base: #t~mem109!base, offset: 92 + #t~mem109!offset }, 4); [L3927] havoc #t~mem110; [L3927] havoc #t~mem109; [L3927] havoc #t~mem111; [L3928] FCALL call #t~mem112 := read~$Pointer$({ base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3928] FCALL call #t~ret113 := input_register_device(#t~mem112); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~mem112; [L3928] havoc #t~ret113; [L3929] ~error~0 := ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] COND FALSE !(0 != ~error~0) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret132=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] FCALL call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4114-L4118] COND FALSE !(0 != ~res_usb_mouse_probe_3~0) [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4100] COND FALSE !(0 == ~tmp___8~4) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4103] COND TRUE 1 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4125] COND TRUE 1 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf := #in~intf; [L3957] havoc ~mouse~4; [L3958] havoc ~tmp___7~8; [L3959] havoc ~tmp___8~3; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf := #in~intf; [L3451] havoc ~tmp___7~0; [L3455] FCALL call #t~ret13 := dev_get_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }); [L3455] ~tmp___7~0 := #t~ret13; [L3455] havoc #t~ret13; [L3457] #res := ~tmp___7~0; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0!base=0, ~tmp___7~0!offset=0] [L3963] RET call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret117!base=0, #t~ret117!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8 := #t~ret117; [L3963] havoc #t~ret117; [L3964] ~mouse~4 := ~tmp___7~8; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3965] CALL call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=0, ~data!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3967-L3978] COND FALSE !(~mouse~4 != { base: 0, offset: 0 }) VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND FALSE !(0 != ~tmp___9~1) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4092] COND FALSE !(!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] FCALL call usb_deregister(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=4294967320, #NULL!offset=4294967400, #t~string100!base=4294967367, #t~string100!offset=4294967349, #t~string124!base=4294967303, #t~string124!offset=4294967358, #t~string127!base=4294967357, #t~string127!offset=4294967323, #t~string17!base=4294967399, #t~string17!offset=4294967365, #t~string23!base=4294967325, #t~string23!offset=4294967311, #t~string29!base=4294967322, #t~string29!offset=4294967352, #t~string31!base=4294967406, #t~string31!offset=4294967383, #t~string59!base=4294967308, #t~string59!offset=4294967360, #t~string90!base=4294967309, #t~string90!offset=4294967370, #t~string96!base=4294967314, #t~string96!offset=4294967369, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967387, ~#usb_mouse_driver~0!offset=4294967347, ~#usb_mouse_id_table~0!base=4294967306, ~#usb_mouse_id_table~0!offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3486] FCALL call #t~string17 := #Ultimate.alloc(10); [L3502] FCALL call #t~string23 := #Ultimate.alloc(9); [L3564] FCALL call #t~string29 := #Ultimate.alloc(20); [L3580] FCALL call #t~string31 := #Ultimate.alloc(20); [L3752] FCALL call #t~string59 := #Ultimate.alloc(59); [L3880] FCALL call #t~string90 := #Ultimate.alloc(2); [L3880] FCALL call write~init~int(32, { base: #t~string90!base, offset: #t~string90!offset }, 1); [L3880] FCALL call write~init~int(0, { base: #t~string90!base, offset: 1 + #t~string90!offset }, 1); [L3898] FCALL call #t~string96 := #Ultimate.alloc(26); [L3904] FCALL call #t~string100 := #Ultimate.alloc(8); [L3988] FCALL call #t~string124 := #Ultimate.alloc(9); [L4017] FCALL call #t~string127 := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0[0] := 97; [L3670-L3681] ~__mod_author48~0[1] := 117; [L3670-L3681] ~__mod_author48~0[2] := 116; [L3670-L3681] ~__mod_author48~0[3] := 104; [L3670-L3681] ~__mod_author48~0[4] := 111; [L3670-L3681] ~__mod_author48~0[5] := 114; [L3670-L3681] ~__mod_author48~0[6] := 61; [L3670-L3681] ~__mod_author48~0[7] := 86; [L3670-L3681] ~__mod_author48~0[8] := 111; [L3670-L3681] ~__mod_author48~0[9] := 106; [L3670-L3681] ~__mod_author48~0[10] := 116; [L3670-L3681] ~__mod_author48~0[11] := 101; [L3670-L3681] ~__mod_author48~0[12] := 99; [L3670-L3681] ~__mod_author48~0[13] := 104; [L3670-L3681] ~__mod_author48~0[14] := 32; [L3670-L3681] ~__mod_author48~0[15] := 80; [L3670-L3681] ~__mod_author48~0[16] := 97; [L3670-L3681] ~__mod_author48~0[17] := 118; [L3670-L3681] ~__mod_author48~0[18] := 108; [L3670-L3681] ~__mod_author48~0[19] := 105; [L3670-L3681] ~__mod_author48~0[20] := 107; [L3670-L3681] ~__mod_author48~0[21] := 32; [L3670-L3681] ~__mod_author48~0[22] := 60; [L3670-L3681] ~__mod_author48~0[23] := 118; [L3670-L3681] ~__mod_author48~0[24] := 111; [L3670-L3681] ~__mod_author48~0[25] := 106; [L3670-L3681] ~__mod_author48~0[26] := 116; [L3670-L3681] ~__mod_author48~0[27] := 101; [L3670-L3681] ~__mod_author48~0[28] := 99; [L3670-L3681] ~__mod_author48~0[29] := 104; [L3670-L3681] ~__mod_author48~0[30] := 64; [L3670-L3681] ~__mod_author48~0[31] := 117; [L3670-L3681] ~__mod_author48~0[32] := 99; [L3670-L3681] ~__mod_author48~0[33] := 119; [L3670-L3681] ~__mod_author48~0[34] := 46; [L3670-L3681] ~__mod_author48~0[35] := 99; [L3670-L3681] ~__mod_author48~0[36] := 122; [L3670-L3681] ~__mod_author48~0[37] := 62; [L3670-L3681] ~__mod_author48~0[38] := 0; [L3682-L3695] ~__mod_description49~0[0] := 100; [L3682-L3695] ~__mod_description49~0[1] := 101; [L3682-L3695] ~__mod_description49~0[2] := 115; [L3682-L3695] ~__mod_description49~0[3] := 99; [L3682-L3695] ~__mod_description49~0[4] := 114; [L3682-L3695] ~__mod_description49~0[5] := 105; [L3682-L3695] ~__mod_description49~0[6] := 112; [L3682-L3695] ~__mod_description49~0[7] := 116; [L3682-L3695] ~__mod_description49~0[8] := 105; [L3682-L3695] ~__mod_description49~0[9] := 111; [L3682-L3695] ~__mod_description49~0[10] := 110; [L3682-L3695] ~__mod_description49~0[11] := 61; [L3682-L3695] ~__mod_description49~0[12] := 85; [L3682-L3695] ~__mod_description49~0[13] := 83; [L3682-L3695] ~__mod_description49~0[14] := 66; [L3682-L3695] ~__mod_description49~0[15] := 32; [L3682-L3695] ~__mod_description49~0[16] := 72; [L3682-L3695] ~__mod_description49~0[17] := 73; [L3682-L3695] ~__mod_description49~0[18] := 68; [L3682-L3695] ~__mod_description49~0[19] := 32; [L3682-L3695] ~__mod_description49~0[20] := 66; [L3682-L3695] ~__mod_description49~0[21] := 111; [L3682-L3695] ~__mod_description49~0[22] := 111; [L3682-L3695] ~__mod_description49~0[23] := 116; [L3682-L3695] ~__mod_description49~0[24] := 32; [L3682-L3695] ~__mod_description49~0[25] := 80; [L3682-L3695] ~__mod_description49~0[26] := 114; [L3682-L3695] ~__mod_description49~0[27] := 111; [L3682-L3695] ~__mod_description49~0[28] := 116; [L3682-L3695] ~__mod_description49~0[29] := 111; [L3682-L3695] ~__mod_description49~0[30] := 99; [L3682-L3695] ~__mod_description49~0[31] := 111; [L3682-L3695] ~__mod_description49~0[32] := 108; [L3682-L3695] ~__mod_description49~0[33] := 32; [L3682-L3695] ~__mod_description49~0[34] := 109; [L3682-L3695] ~__mod_description49~0[35] := 111; [L3682-L3695] ~__mod_description49~0[36] := 117; [L3682-L3695] ~__mod_description49~0[37] := 115; [L3682-L3695] ~__mod_description49~0[38] := 101; [L3682-L3695] ~__mod_description49~0[39] := 32; [L3682-L3695] ~__mod_description49~0[40] := 100; [L3682-L3695] ~__mod_description49~0[41] := 114; [L3682-L3695] ~__mod_description49~0[42] := 105; [L3682-L3695] ~__mod_description49~0[43] := 118; [L3682-L3695] ~__mod_description49~0[44] := 101; [L3682-L3695] ~__mod_description49~0[45] := 114; [L3682-L3695] ~__mod_description49~0[46] := 0; [L3696-L3700] ~__mod_license50~0[0] := 108; [L3696-L3700] ~__mod_license50~0[1] := 105; [L3696-L3700] ~__mod_license50~0[2] := 99; [L3696-L3700] ~__mod_license50~0[3] := 101; [L3696-L3700] ~__mod_license50~0[4] := 110; [L3696-L3700] ~__mod_license50~0[5] := 115; [L3696-L3700] ~__mod_license50~0[6] := 101; [L3696-L3700] ~__mod_license50~0[7] := 61; [L3696-L3700] ~__mod_license50~0[8] := 71; [L3696-L3700] ~__mod_license50~0[9] := 80; [L3696-L3700] ~__mod_license50~0[10] := 76; [L3696-L3700] ~__mod_license50~0[11] := 0; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] FCALL call ~#usb_mouse_id_table~0 := #Ultimate.alloc(24); [L3982-L3984] FCALL call write~init~int(896, { base: ~#usb_mouse_id_table~0!base, offset: ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 2 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 4 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 6 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 8 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 10 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 11 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 12 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(3, { base: ~#usb_mouse_id_table~0!base, offset: 13 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(1, { base: ~#usb_mouse_id_table~0!base, offset: 14 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(2, { base: ~#usb_mouse_id_table~0!base, offset: 15 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 16 + ~#usb_mouse_id_table~0!offset }, 8); [L3987-L4003] FCALL call ~#usb_mouse_driver~0 := #Ultimate.alloc(281); [L3987-L4003] FCALL call write~init~$Pointer$(#t~string124, { base: ~#usb_mouse_driver~0!base, offset: ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_probe, { base: ~#usb_mouse_driver~0!base, offset: 8 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_disconnect, { base: ~#usb_mouse_driver~0!base, offset: 16 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 24 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 32 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 40 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 48 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 56 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 64 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(~#usb_mouse_id_table~0, { base: ~#usb_mouse_driver~0!base, offset: 72 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 80 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 84 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 88 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 92 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 100 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 108 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 116 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 124 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 132 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 136 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 144 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 152 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 160 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 168 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 176 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 184 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 192 + ~#usb_mouse_driver~0!offset }, 1); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 193 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 201 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 209 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 217 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 225 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 233 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 241 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 249 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 257 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 265 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 269 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 273 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 277 + ~#usb_mouse_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0; [L4065] havoc ~var_usb_mouse_probe_3_p1~0; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver := #in~driver; [L3498] havoc ~tmp___7~2; [L3502] FCALL call #t~ret24 := usb_register_driver(~driver, ~#__this_module~0, #t~string23); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~driver!base=4294967340, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret125=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015] COND TRUE 0 == ~retval~0 [L4017] havoc #t~nondet126; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret129=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] COND FALSE !(0 != ~tmp___7~11) [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100] COND TRUE 0 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109] COND TRUE 0 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf := #in~intf; [L3794-L3955] ~id := #in~id; [L3795] havoc ~dev~1; [L3796] havoc ~tmp___7~7; [L3797] havoc ~interface~0; [L3798] havoc ~endpoint~0; [L3799] havoc ~mouse~3; [L3800] havoc ~input_dev~0; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0; [L3808] havoc ~tmp___12~0; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf := #in~intf; [L3473] havoc ~__mptr~0; [L3476] FCALL call #t~mem15 := read~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, 8); [L3476] ~__mptr~0 := #t~mem15; [L3476] havoc #t~mem15; [L3477] #res := { base: ~__mptr~0!base, offset: ~__mptr~0!offset - 131 }; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__mptr~0!base=4294967339, ~__mptr~0!offset=131, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret71!base=4294967339, #t~ret71!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7 := #t~ret71; [L3815] havoc #t~ret71; [L3816] ~dev~1 := ~tmp___7~7; [L3817] ~error~0 := -12; [L3818] FCALL call #t~mem72 := read~$Pointer$({ base: ~intf!base, offset: 8 + ~intf!offset }, 8); [L3818] ~interface~0 := #t~mem72; [L3818] havoc #t~mem72; [L3820] FCALL call #t~mem73 := read~int({ base: ~interface~0!base, offset: 4 + ~interface~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem73=-255, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3820] COND FALSE !(1 != #t~mem73 % 256) [L3820] havoc #t~mem73; [L3826] FCALL call #t~mem74 := read~$Pointer$({ base: ~interface~0!base, offset: 9 + ~interface~0!offset }, 8); [L3826] ~endpoint~0 := { base: #t~mem74!base, offset: #t~mem74!offset }; [L3826] havoc #t~mem74; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd := #in~epd; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd := #in~epd; [L3419] FCALL call #t~mem10 := read~int({ base: ~epd!base, offset: 3 + ~epd!offset }, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret11=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] COND TRUE 0 != ~tmp~1 VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd := #in~epd; [L3412] FCALL call #t~mem9 := read~int({ base: ~epd!base, offset: 2 + ~epd!offset }, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret12=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] COND TRUE 0 != ~tmp___0~0 [L3436] ~tmp___1~0 := 1; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret75=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3829-L3833] COND TRUE 0 != ~tmp___8~2 VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] FCALL call #t~mem76 := read~int({ base: ~endpoint~0!base, offset: 2 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev := #in~dev; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] FCALL call #t~mem28 := read~int({ base: ~dev!base, offset: ~dev!offset }, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~mem76; [L3835] havoc #t~ret77; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev := #in~udev; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev!base=4294967339, ~udev!offset=0] [L3557-L3589] COND FALSE !(0 != ~is_out) [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3578-L3584] COND TRUE 0 != ~tmp___8~0 [L3580] FCALL call warn_slowpath_null(#t~string31, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3587] FCALL call #t~mem32 := read~$Pointer$({ base: ~udev!base, offset: 1263 + ~udev!offset + 8 * (~epnum~0 % 4294967296) }, 8); [L3587] ~ep~0 := #t~mem32; [L3587] havoc #t~mem32; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3590] COND TRUE ~ep~0 == { base: 0, offset: 0 } [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret78=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79 := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967345, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0!base=4294967386, ~tmp___2~0!offset=-38] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967386, #t~ret8!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0!base=4294967386, ~tmp~0!offset=-38] [L3839] RET call #t~ret79 := kzalloc(232, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret79!base=4294967386, #t~ret79!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0 := #t~ret79; [L3839] havoc #t~ret79; [L3840] ~mouse~3 := ~tmp___11~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80 := input_allocate_device(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967381, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0!base=4294967339, ~tmp___2~0!offset=-24] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967339, #t~ret8!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0!base=4294967339, ~tmp~0!offset=-24] [L3599] RET call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL!base=0, #NULL!offset=0, #t~ret34!base=4294967339, #t~ret34!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res := #t~ret34; [L3599] havoc #t~ret34; VAL [#NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80 := input_allocate_device(); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret80!base=4294967339, #t~ret80!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0 := #t~ret80; [L3841] havoc #t~ret80; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843] COND FALSE !(~mouse~3 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846] COND FALSE !(~input_dev~0 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev := #in~dev; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma := #in~dma; [L4179] havoc ~arbitrary_memory~0; [L4180] havoc ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] COND FALSE !(false) VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] FCALL call #t~ret133 := ldv_undefined_pointer(); [L4187] ~tmp___7~12 := #t~ret133; [L4187] havoc #t~ret133; [L4188] ~arbitrary_memory~0 := ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L4190] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res := ~arbitrary_memory~0; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L3852] RET call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret81!base=4294967386, #t~ret81!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0 := #t~ret81; [L3852] havoc #t~ret81; [L3853] FCALL call write~$Pointer$(~tmp___12~0, { base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3855] FCALL call #t~mem82 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=4294967386, #t~mem82!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855] COND FALSE !(#t~mem82 == { base: 0, offset: 0 }) [L3855] havoc #t~mem82; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1; [L4243] havoc ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] COND FALSE !(false) VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] FCALL call #t~ret134 := ldv_undefined_pointer(); [L4250] ~tmp___7~13 := #t~ret134; [L4250] havoc #t~ret134; [L4251] ~arbitrary_memory~1 := ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L4253] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res := ~arbitrary_memory~1; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L3861] RET call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret83!base=4294967386, #t~ret83!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] FCALL call write~$Pointer$(#t~ret83, { base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3861] havoc #t~ret83; [L3863] FCALL call #t~mem84 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem84!base=4294967386, #t~mem84!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863] COND FALSE !(#t~mem84 == { base: 0, offset: 0 }) [L3863] havoc #t~mem84; [L3868] FCALL call write~$Pointer$(~dev~1, { base: ~mouse~3!base, offset: 192 + ~mouse~3!offset }, 8); [L3869] FCALL call write~$Pointer$(~input_dev~0, { base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3870] FCALL call #t~mem85 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem85!base=4294967395, #t~mem85!offset=4294967394, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] COND TRUE #t~mem85 != { base: 0, offset: 0 } [L3870] havoc #t~mem85; [L3872] FCALL call #t~mem86 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); [L3872] FCALL call #t~ret87 := strlcpy({ base: ~mouse~3!base, offset: ~mouse~3!offset }, #t~mem86, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] FCALL call #t~mem88 := read~$Pointer$({ base: ~dev~1!base, offset: 1559 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem88!base=0, #t~mem88!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] COND FALSE !(#t~mem88 != { base: 0, offset: 0 }) [L3877] havoc #t~mem88; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] COND FALSE !(0 != ~tmp___13~0 % 18446744073709551616) [L3898-L3899] havoc #t~nondet95; [L3898] FCALL call #t~mem97 := read~int({ base: ~dev~1!base, offset: 1237 + ~dev~1!offset }, 2); [L3899] FCALL call #t~mem98 := read~int({ base: ~dev~1!base, offset: 1239 + ~dev~1!offset }, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev := #in~dev; [L3480-L3495] ~buf := #in~buf; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] FCALL call #t~mem18 := read~$Pointer$({ base: ~dev!base, offset: 60 + ~dev!offset }, 8); [L3486] FCALL call #t~mem19 := read~$Pointer$({ base: #t~mem18!base, offset: 12 + #t~mem18!offset }, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem19; [L3486] havoc #t~mem18; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488] COND TRUE ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296) [L3489] ~tmp___7~1 := -1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #res=-1, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret99=-1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] FCALL call #t~ret101 := strlcat({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, #t~string100, 64); [L3904] havoc #t~ret101; [L3905] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: ~mouse~3!offset }, { base: ~input_dev~0!base, offset: ~input_dev~0!offset }, 8); [L3906] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, { base: ~input_dev~0!base, offset: 8 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev := #in~dev; [L3659-L3669] ~id := #in~id; [L3663] FCALL call write~int(3, { base: ~id!base, offset: ~id!offset }, 2); [L3664] FCALL call #t~mem39 := read~int({ base: ~dev!base, offset: 1237 + ~dev!offset }, 2); [L3664] FCALL call write~int(#t~mem39, { base: ~id!base, offset: 2 + ~id!offset }, 2); [L3664] havoc #t~mem39; [L3665] FCALL call #t~mem40 := read~int({ base: ~dev!base, offset: 1239 + ~dev!offset }, 2); [L3665] FCALL call write~int(#t~mem40, { base: ~id!base, offset: 4 + ~id!offset }, 2); [L3665] havoc #t~mem40; [L3666] FCALL call #t~mem41 := read~int({ base: ~dev!base, offset: 1241 + ~dev!offset }, 2); [L3666] FCALL call write~int(#t~mem41, { base: ~id!base, offset: 6 + ~id!offset }, 2); [L3666] havoc #t~mem41; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~id!base=4294967339, ~id!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] FCALL call write~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, { base: ~input_dev~0!base, offset: 798 + ~input_dev~0!offset }, 8); [L3909] FCALL call write~int(~bitwiseOr(2, 4), { base: ~input_dev~0!base, offset: 40 + ~input_dev~0!offset }, 8); [L3910] FCALL call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3911] FCALL call write~int(~bitwiseOr(1, 2), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3912] FCALL call #t~mem102 := read~int({ base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] FCALL call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] havoc #t~mem102; [L3913] FCALL call #t~mem103 := read~int({ base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] FCALL call write~int(~bitwiseOr(#t~mem103, 256), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] havoc #t~mem103; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev := #in~dev; [L3613-L3622] ~data := #in~data; [L3618] FCALL call #t~ret36 := dev_set_drvdata({ base: ~dev!base, offset: 798 + ~dev!offset }, ~data); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~dev!base=4294967339, ~dev!offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] FCALL call write~$Pointer$(#funAddr~usb_mouse_open, { base: ~input_dev~0!base, offset: 536 + ~input_dev~0!offset }, 8); [L3916] FCALL call write~$Pointer$(#funAddr~usb_mouse_close, { base: ~input_dev~0!base, offset: 544 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918] COND FALSE !(~maxp~0 > 8) [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] FCALL call #t~mem104 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3924] FCALL call #t~mem105 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3925] FCALL call #t~mem106 := read~int({ base: ~endpoint~0!base, offset: 6 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb := #in~urb; [L3508-L3532] ~dev := #in~dev; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer := #in~transfer_buffer; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn := #in~complete_fn; [L3508-L3532] ~context := #in~context; [L3508-L3532] ~interval := #in~interval; [L3515] FCALL call write~$Pointer$(~dev, { base: ~urb!base, offset: 64 + ~urb!offset }, 8); [L3516] FCALL call write~int(~pipe, { base: ~urb!base, offset: 80 + ~urb!offset }, 4); [L3517] FCALL call write~$Pointer$(~transfer_buffer, { base: ~urb!base, offset: 96 + ~urb!offset }, 8); [L3518] FCALL call write~int(~buffer_length, { base: ~urb!base, offset: 124 + ~urb!offset }, 4); [L3519] FCALL call write~$Pointer$(~complete_fn, { base: ~urb!base, offset: 172 + ~urb!offset }, 8); [L3520] FCALL call write~$Pointer$(~context, { base: ~urb!base, offset: 164 + ~urb!offset }, 8); [L3521] FCALL call #t~mem26 := read~int({ base: ~dev!base, offset: 28 + ~dev!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~mem26=4294967299, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3521] COND TRUE 3 == #t~mem26 % 4294967296 [L3521] havoc #t~mem26; [L3522] FCALL call write~int(~shiftLeft(1, ~interval - 1), { base: ~urb!base, offset: 156 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3529] FCALL call write~int(-1, { base: ~urb!base, offset: 148 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] havoc #t~mem105; [L3925] havoc #t~mem106; [L3924] havoc #t~mem104; [L3926] FCALL call #t~mem107 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3926] FCALL call #t~mem108 := read~int({ base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }, 8); [L3926] FCALL call write~int(#t~mem108, { base: #t~mem107!base, offset: 104 + #t~mem107!offset }, 8); [L3926] havoc #t~mem108; [L3926] havoc #t~mem107; [L3927] FCALL call #t~mem109 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem110 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem111 := read~int({ base: #t~mem110!base, offset: 92 + #t~mem110!offset }, 4); [L3927] FCALL call write~int(~bitwiseOr(#t~mem111, 4), { base: #t~mem109!base, offset: 92 + #t~mem109!offset }, 4); [L3927] havoc #t~mem110; [L3927] havoc #t~mem109; [L3927] havoc #t~mem111; [L3928] FCALL call #t~mem112 := read~$Pointer$({ base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3928] FCALL call #t~ret113 := input_register_device(#t~mem112); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~mem112; [L3928] havoc #t~ret113; [L3929] ~error~0 := ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] COND FALSE !(0 != ~error~0) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret132=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] FCALL call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4114-L4118] COND FALSE !(0 != ~res_usb_mouse_probe_3~0) [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4100] COND FALSE !(0 == ~tmp___8~4) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4103] COND TRUE 1 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4125] COND TRUE 1 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf := #in~intf; [L3957] havoc ~mouse~4; [L3958] havoc ~tmp___7~8; [L3959] havoc ~tmp___8~3; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf := #in~intf; [L3451] havoc ~tmp___7~0; [L3455] FCALL call #t~ret13 := dev_get_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }); [L3455] ~tmp___7~0 := #t~ret13; [L3455] havoc #t~ret13; [L3457] #res := ~tmp___7~0; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0!base=0, ~tmp___7~0!offset=0] [L3963] RET call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret117!base=0, #t~ret117!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8 := #t~ret117; [L3963] havoc #t~ret117; [L3964] ~mouse~4 := ~tmp___7~8; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3965] CALL call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=0, ~data!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3967-L3978] COND FALSE !(~mouse~4 != { base: 0, offset: 0 }) VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND FALSE !(0 != ~tmp___9~1) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4092] COND FALSE !(!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] FCALL call usb_deregister(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] ----- [2018-11-22 22:21:34,416 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967317 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## [2018-11-22 22:21:34,417 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967387 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# [2018-11-22 22:21:34,432 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967347 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# [2018-11-22 22:21:34,433 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967306 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=4294967320, #NULL!offset=4294967400, #t~string100!base=4294967367, #t~string100!offset=4294967349, #t~string124!base=4294967303, #t~string124!offset=4294967358, #t~string127!base=4294967357, #t~string127!offset=4294967323, #t~string17!base=4294967399, #t~string17!offset=4294967365, #t~string23!base=4294967325, #t~string23!offset=4294967311, #t~string29!base=4294967322, #t~string29!offset=4294967352, #t~string31!base=4294967406, #t~string31!offset=4294967383, #t~string59!base=4294967308, #t~string59!offset=4294967360, #t~string90!base=4294967309, #t~string90!offset=4294967370, #t~string96!base=4294967314, #t~string96!offset=4294967369, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967387, ~#usb_mouse_driver~0!offset=4294967347, ~#usb_mouse_id_table~0!base=4294967306, ~#usb_mouse_id_table~0!offset=4294967317, ~ldv_coherent_state~0=4294967300, ~LDV_IN_INTERRUPT~0=4294967315, ~ldv_urb_state~0=4294967351, ~res_usb_mouse_probe_3~0=4294967404] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3486] FCALL call #t~string17 := #Ultimate.alloc(10); [L3502] FCALL call #t~string23 := #Ultimate.alloc(9); [L3564] FCALL call #t~string29 := #Ultimate.alloc(20); [L3580] FCALL call #t~string31 := #Ultimate.alloc(20); [L3752] FCALL call #t~string59 := #Ultimate.alloc(59); [L3880] FCALL call #t~string90 := #Ultimate.alloc(2); [L3880] FCALL call write~init~int(32, { base: #t~string90!base, offset: #t~string90!offset }, 1); [L3880] FCALL call write~init~int(0, { base: #t~string90!base, offset: 1 + #t~string90!offset }, 1); [L3898] FCALL call #t~string96 := #Ultimate.alloc(26); [L3904] FCALL call #t~string100 := #Ultimate.alloc(8); [L3988] FCALL call #t~string124 := #Ultimate.alloc(9); [L4017] FCALL call #t~string127 := #Ultimate.alloc(54); [L3670-L3681] ~__mod_author48~0[0] := 97; [L3670-L3681] ~__mod_author48~0[1] := 117; [L3670-L3681] ~__mod_author48~0[2] := 116; [L3670-L3681] ~__mod_author48~0[3] := 104; [L3670-L3681] ~__mod_author48~0[4] := 111; [L3670-L3681] ~__mod_author48~0[5] := 114; [L3670-L3681] ~__mod_author48~0[6] := 61; [L3670-L3681] ~__mod_author48~0[7] := 86; [L3670-L3681] ~__mod_author48~0[8] := 111; [L3670-L3681] ~__mod_author48~0[9] := 106; [L3670-L3681] ~__mod_author48~0[10] := 116; [L3670-L3681] ~__mod_author48~0[11] := 101; [L3670-L3681] ~__mod_author48~0[12] := 99; [L3670-L3681] ~__mod_author48~0[13] := 104; [L3670-L3681] ~__mod_author48~0[14] := 32; [L3670-L3681] ~__mod_author48~0[15] := 80; [L3670-L3681] ~__mod_author48~0[16] := 97; [L3670-L3681] ~__mod_author48~0[17] := 118; [L3670-L3681] ~__mod_author48~0[18] := 108; [L3670-L3681] ~__mod_author48~0[19] := 105; [L3670-L3681] ~__mod_author48~0[20] := 107; [L3670-L3681] ~__mod_author48~0[21] := 32; [L3670-L3681] ~__mod_author48~0[22] := 60; [L3670-L3681] ~__mod_author48~0[23] := 118; [L3670-L3681] ~__mod_author48~0[24] := 111; [L3670-L3681] ~__mod_author48~0[25] := 106; [L3670-L3681] ~__mod_author48~0[26] := 116; [L3670-L3681] ~__mod_author48~0[27] := 101; [L3670-L3681] ~__mod_author48~0[28] := 99; [L3670-L3681] ~__mod_author48~0[29] := 104; [L3670-L3681] ~__mod_author48~0[30] := 64; [L3670-L3681] ~__mod_author48~0[31] := 117; [L3670-L3681] ~__mod_author48~0[32] := 99; [L3670-L3681] ~__mod_author48~0[33] := 119; [L3670-L3681] ~__mod_author48~0[34] := 46; [L3670-L3681] ~__mod_author48~0[35] := 99; [L3670-L3681] ~__mod_author48~0[36] := 122; [L3670-L3681] ~__mod_author48~0[37] := 62; [L3670-L3681] ~__mod_author48~0[38] := 0; [L3682-L3695] ~__mod_description49~0[0] := 100; [L3682-L3695] ~__mod_description49~0[1] := 101; [L3682-L3695] ~__mod_description49~0[2] := 115; [L3682-L3695] ~__mod_description49~0[3] := 99; [L3682-L3695] ~__mod_description49~0[4] := 114; [L3682-L3695] ~__mod_description49~0[5] := 105; [L3682-L3695] ~__mod_description49~0[6] := 112; [L3682-L3695] ~__mod_description49~0[7] := 116; [L3682-L3695] ~__mod_description49~0[8] := 105; [L3682-L3695] ~__mod_description49~0[9] := 111; [L3682-L3695] ~__mod_description49~0[10] := 110; [L3682-L3695] ~__mod_description49~0[11] := 61; [L3682-L3695] ~__mod_description49~0[12] := 85; [L3682-L3695] ~__mod_description49~0[13] := 83; [L3682-L3695] ~__mod_description49~0[14] := 66; [L3682-L3695] ~__mod_description49~0[15] := 32; [L3682-L3695] ~__mod_description49~0[16] := 72; [L3682-L3695] ~__mod_description49~0[17] := 73; [L3682-L3695] ~__mod_description49~0[18] := 68; [L3682-L3695] ~__mod_description49~0[19] := 32; [L3682-L3695] ~__mod_description49~0[20] := 66; [L3682-L3695] ~__mod_description49~0[21] := 111; [L3682-L3695] ~__mod_description49~0[22] := 111; [L3682-L3695] ~__mod_description49~0[23] := 116; [L3682-L3695] ~__mod_description49~0[24] := 32; [L3682-L3695] ~__mod_description49~0[25] := 80; [L3682-L3695] ~__mod_description49~0[26] := 114; [L3682-L3695] ~__mod_description49~0[27] := 111; [L3682-L3695] ~__mod_description49~0[28] := 116; [L3682-L3695] ~__mod_description49~0[29] := 111; [L3682-L3695] ~__mod_description49~0[30] := 99; [L3682-L3695] ~__mod_description49~0[31] := 111; [L3682-L3695] ~__mod_description49~0[32] := 108; [L3682-L3695] ~__mod_description49~0[33] := 32; [L3682-L3695] ~__mod_description49~0[34] := 109; [L3682-L3695] ~__mod_description49~0[35] := 111; [L3682-L3695] ~__mod_description49~0[36] := 117; [L3682-L3695] ~__mod_description49~0[37] := 115; [L3682-L3695] ~__mod_description49~0[38] := 101; [L3682-L3695] ~__mod_description49~0[39] := 32; [L3682-L3695] ~__mod_description49~0[40] := 100; [L3682-L3695] ~__mod_description49~0[41] := 114; [L3682-L3695] ~__mod_description49~0[42] := 105; [L3682-L3695] ~__mod_description49~0[43] := 118; [L3682-L3695] ~__mod_description49~0[44] := 101; [L3682-L3695] ~__mod_description49~0[45] := 114; [L3682-L3695] ~__mod_description49~0[46] := 0; [L3696-L3700] ~__mod_license50~0[0] := 108; [L3696-L3700] ~__mod_license50~0[1] := 105; [L3696-L3700] ~__mod_license50~0[2] := 99; [L3696-L3700] ~__mod_license50~0[3] := 101; [L3696-L3700] ~__mod_license50~0[4] := 110; [L3696-L3700] ~__mod_license50~0[5] := 115; [L3696-L3700] ~__mod_license50~0[6] := 101; [L3696-L3700] ~__mod_license50~0[7] := 61; [L3696-L3700] ~__mod_license50~0[8] := 71; [L3696-L3700] ~__mod_license50~0[9] := 80; [L3696-L3700] ~__mod_license50~0[10] := 76; [L3696-L3700] ~__mod_license50~0[11] := 0; [L4061] ~LDV_IN_INTERRUPT~0 := 0; [L4062] ~res_usb_mouse_probe_3~0 := 0; [L4173] ~ldv_urb_state~0 := 0; [L4174] ~ldv_coherent_state~0 := 0; [L3982-L3984] FCALL call ~#usb_mouse_id_table~0 := #Ultimate.alloc(24); [L3982-L3984] FCALL call write~init~int(896, { base: ~#usb_mouse_id_table~0!base, offset: ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 2 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 4 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 6 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 8 + ~#usb_mouse_id_table~0!offset }, 2); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 10 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 11 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 12 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(3, { base: ~#usb_mouse_id_table~0!base, offset: 13 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(1, { base: ~#usb_mouse_id_table~0!base, offset: 14 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(2, { base: ~#usb_mouse_id_table~0!base, offset: 15 + ~#usb_mouse_id_table~0!offset }, 1); [L3982-L3984] FCALL call write~init~int(0, { base: ~#usb_mouse_id_table~0!base, offset: 16 + ~#usb_mouse_id_table~0!offset }, 8); [L3987-L4003] FCALL call ~#usb_mouse_driver~0 := #Ultimate.alloc(281); [L3987-L4003] FCALL call write~init~$Pointer$(#t~string124, { base: ~#usb_mouse_driver~0!base, offset: ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_probe, { base: ~#usb_mouse_driver~0!base, offset: 8 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(#funAddr~usb_mouse_disconnect, { base: ~#usb_mouse_driver~0!base, offset: 16 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 24 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 32 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 40 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 48 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 56 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 64 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$(~#usb_mouse_id_table~0, { base: ~#usb_mouse_driver~0!base, offset: 72 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 80 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 84 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 88 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 92 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 100 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 108 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 116 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 124 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 132 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 136 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 144 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 152 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 160 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 168 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 176 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 184 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 192 + ~#usb_mouse_driver~0!offset }, 1); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 193 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 201 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 209 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 217 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 225 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 233 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 241 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 249 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#usb_mouse_driver~0!base, offset: 257 + ~#usb_mouse_driver~0!offset }, 8); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 265 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 269 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 273 + ~#usb_mouse_driver~0!offset }, 4); [L3987-L4003] FCALL call write~init~int(0, { base: ~#usb_mouse_driver~0!base, offset: 277 + ~#usb_mouse_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(#NULL!base)=4294967320, old(#NULL!offset)=4294967400, old(#t~string100!base)=4294967367, old(#t~string100!offset)=4294967349, old(#t~string124!base)=4294967303, old(#t~string124!offset)=4294967358, old(#t~string127!base)=4294967357, old(#t~string127!offset)=4294967323, old(#t~string17!base)=4294967399, old(#t~string17!offset)=4294967365, old(#t~string23!base)=4294967325, old(#t~string23!offset)=4294967311, old(#t~string29!base)=4294967322, old(#t~string29!offset)=4294967352, old(#t~string31!base)=4294967406, old(#t~string31!offset)=4294967383, old(#t~string59!base)=4294967308, old(#t~string59!offset)=4294967360, old(#t~string90!base)=4294967309, old(#t~string90!offset)=4294967370, old(#t~string96!base)=4294967314, old(#t~string96!offset)=4294967369, old(~#usb_mouse_driver~0!base)=4294967387, old(~#usb_mouse_driver~0!offset)=4294967347, old(~#usb_mouse_id_table~0!base)=4294967306, old(~#usb_mouse_id_table~0!offset)=4294967317, old(~ldv_coherent_state~0)=4294967300, old(~LDV_IN_INTERRUPT~0)=4294967315, old(~ldv_urb_state~0)=4294967351, old(~res_usb_mouse_probe_3~0)=4294967404, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [?] CALL call #t~ret135 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4064] havoc ~var_group1~0; [L4065] havoc ~var_usb_mouse_probe_3_p1~0; [L4066] havoc ~tmp___7~11; [L4067] havoc ~ldv_s_usb_mouse_driver_usb_driver~0; [L4068] havoc ~tmp___8~4; [L4069] havoc ~tmp___9~1; [L4073] ~LDV_IN_INTERRUPT~0 := 1; [L4074] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] CALL call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4007] havoc ~retval~0; [L4008] havoc ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] CALL call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3497-L3506] ~driver := #in~driver; [L3498] havoc ~tmp___7~2; [L3502] FCALL call #t~ret24 := usb_register_driver(~driver, ~#__this_module~0, #t~string23); [L3502] assume -2147483648 <= #t~ret24 && #t~ret24 <= 2147483647; [L3502] ~tmp___7~2 := #t~ret24; [L3502] havoc #t~ret24; [L3504] #res := ~tmp___7~2; VAL [#in~driver!base=4294967340, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~driver!base=4294967340, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~2=0] [L4012] RET call #t~ret125 := usb_register(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret125=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4012] assume -2147483648 <= #t~ret125 && #t~ret125 <= 2147483647; [L4012] ~tmp___7~9 := #t~ret125; [L4012] havoc #t~ret125; [L4013] ~retval~0 := ~tmp___7~9; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4015] COND TRUE 0 == ~retval~0 [L4017] havoc #t~nondet126; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4022] #res := ~retval~0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~retval~0=0, ~tmp___7~9=0] [L4075] RET call #t~ret129 := usb_mouse_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret129=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4075] assume -2147483648 <= #t~ret129 && #t~ret129 <= 2147483647; [L4075] ~tmp___7~11 := #t~ret129; [L4075] havoc #t~ret129; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4077-L4081] COND FALSE !(0 != ~tmp___7~11) [L4082] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___9~1=1] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4100] COND TRUE 0 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4109] COND TRUE 0 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1] [L4111] CALL call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3794-L3955] ~intf := #in~intf; [L3794-L3955] ~id := #in~id; [L3795] havoc ~dev~1; [L3796] havoc ~tmp___7~7; [L3797] havoc ~interface~0; [L3798] havoc ~endpoint~0; [L3799] havoc ~mouse~3; [L3800] havoc ~input_dev~0; [L3801] havoc ~pipe~0; [L3802] havoc ~maxp~0; [L3803] havoc ~error~0; [L3804] havoc ~tmp___8~2; [L3805] havoc ~tmp___9~0; [L3806] havoc ~tmp___10~0; [L3807] havoc ~tmp___11~0; [L3808] havoc ~tmp___12~0; [L3809] havoc ~tmp___13~0; [L3810] havoc ~tmp___14~0; [L3811] havoc ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] CALL call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3472-L3479] ~intf := #in~intf; [L3473] havoc ~__mptr~0; [L3476] FCALL call #t~mem15 := read~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, 8); [L3476] ~__mptr~0 := #t~mem15; [L3476] havoc #t~mem15; [L3477] #res := { base: ~__mptr~0!base, offset: ~__mptr~0!offset - 131 }; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__mptr~0!base=4294967339, ~__mptr~0!offset=131, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] RET call #t~ret71 := interface_to_usbdev(~intf); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret71!base=4294967339, #t~ret71!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~id!base=4294967327, ~id!offset=4294967392, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3815] ~tmp___7~7 := #t~ret71; [L3815] havoc #t~ret71; [L3816] ~dev~1 := ~tmp___7~7; [L3817] ~error~0 := -12; [L3818] FCALL call #t~mem72 := read~$Pointer$({ base: ~intf!base, offset: 8 + ~intf!offset }, 8); [L3818] ~interface~0 := #t~mem72; [L3818] havoc #t~mem72; [L3820] FCALL call #t~mem73 := read~int({ base: ~interface~0!base, offset: 4 + ~interface~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem73=-255, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3820] COND FALSE !(1 != #t~mem73 % 256) [L3820] havoc #t~mem73; [L3826] FCALL call #t~mem74 := read~$Pointer$({ base: ~interface~0!base, offset: 9 + ~interface~0!offset }, 8); [L3826] ~endpoint~0 := { base: #t~mem74!base, offset: #t~mem74!offset }; [L3826] havoc #t~mem74; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] CALL call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3422-L3445] ~epd := #in~epd; [L3423] havoc ~tmp~1; [L3424] havoc ~tmp___0~0; [L3425] havoc ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] CALL call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3415-L3421] ~epd := #in~epd; [L3419] FCALL call #t~mem10 := read~int({ base: ~epd!base, offset: 3 + ~epd!offset }, 1); [L3419] #res := (if 3 == ~bitwiseAnd(#t~mem10 % 256, 3) then 1 else 0); [L3419] havoc #t~mem10; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] RET call #t~ret11 := usb_endpoint_xfer_int(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret11=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3429] assume -2147483648 <= #t~ret11 && #t~ret11 <= 2147483647; [L3429] ~tmp~1 := #t~ret11; [L3429] havoc #t~ret11; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3431-L3442] COND TRUE 0 != ~tmp~1 VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] CALL call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3408-L3414] ~epd := #in~epd; [L3412] FCALL call #t~mem9 := read~int({ base: ~epd!base, offset: 2 + ~epd!offset }, 1); [L3412] #res := (if 128 == ~bitwiseAnd(#t~mem9 % 256, 128) then 1 else 0); [L3412] havoc #t~mem9; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3433] RET call #t~ret12 := usb_endpoint_dir_in(~epd); VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret12=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp~1=1] [L3433] assume -2147483648 <= #t~ret12 && #t~ret12 <= 2147483647; [L3433] ~tmp___0~0 := #t~ret12; [L3433] havoc #t~ret12; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp~1=1] [L3435-L3439] COND TRUE 0 != ~tmp___0~0 [L3436] ~tmp___1~0 := 1; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3443] #res := ~tmp___1~0; VAL [#in~epd!base=4294967321, #in~epd!offset=0, #NULL!base=0, #NULL!offset=0, #res=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~epd!base=4294967321, ~epd!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___0~0=1, ~tmp___1~0=1, ~tmp~1=1] [L3827] RET call #t~ret75 := usb_endpoint_is_int_in(~endpoint~0); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret75=1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0] [L3827] assume -2147483648 <= #t~ret75 && #t~ret75 <= 2147483647; [L3827] ~tmp___8~2 := #t~ret75; [L3827] havoc #t~ret75; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3829-L3833] COND TRUE 0 != ~tmp___8~2 VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] FCALL call #t~mem76 := read~int({ base: ~endpoint~0!base, offset: 2 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] CALL call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3540-L3546] ~dev := #in~dev; [L3540-L3546] ~endpoint := #in~endpoint; [L3544] FCALL call #t~mem28 := read~int({ base: ~dev!base, offset: ~dev!offset }, 4); [L3544] #res := ~bitwiseOr(256 * #t~mem28, 32768 * ~endpoint); [L3544] havoc #t~mem28; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~endpoint=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~endpoint=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3835] RET call #t~ret77 := __create_pipe(~dev~1, #t~mem76 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem76=0, #t~ret77=4294967336, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1] [L3835] ~tmp___9~0 := #t~ret77; [L3835] havoc #t~mem76; [L3835] havoc #t~ret77; [L3836] ~pipe~0 := (if ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 <= 2147483647 then ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 else ~bitwiseOr(~bitwiseOr(1073741824, ~tmp___9~0), 128) % 4294967296 % 4294967296 - 4294967296); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] CALL call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3547-L3597] ~udev := #in~udev; [L3547-L3597] ~pipe := #in~pipe; [L3547-L3597] ~is_out := #in~is_out; [L3548] havoc ~ep~0; [L3549] havoc ~epnum~0; [L3550] havoc ~__ret_warn_on~0; [L3551] havoc ~tmp___7~3; [L3552] havoc ~__ret_warn_on___0~0; [L3553] havoc ~tmp___8~0; [L3556] ~epnum~0 := ~bitwiseAnd(~pipe / 32768, 15); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~udev!base=4294967339, ~udev!offset=0] [L3557-L3589] COND FALSE !(0 != ~is_out) [L3575] ~__ret_warn_on___0~0 := (if !!(0 == ~bitwiseAnd(~pipe, 128)) then 1 else 0); [L3576] ~tmp___8~0 := (if !(0 == ~__ret_warn_on___0~0) then 1 else 0); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3578-L3584] COND TRUE 0 != ~tmp___8~0 [L3580] FCALL call warn_slowpath_null(#t~string31, 1570); VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3587] FCALL call #t~mem32 := read~$Pointer$({ base: ~udev!base, offset: 1263 + ~udev!offset + 8 * (~epnum~0 % 4294967296) }, 8); [L3587] ~ep~0 := #t~mem32; [L3587] havoc #t~mem32; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3590] COND TRUE ~ep~0 == { base: 0, offset: 0 } [L3591] #res := 0; VAL [#in~is_out=0, #in~pipe=0, #in~udev!base=4294967339, #in~udev!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~__ret_warn_on___0~0=1, ~epnum~0=0, ~ep~0!base=0, ~ep~0!offset=0, ~is_out=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~tmp___8~0=1, ~udev!base=4294967339, ~udev!offset=0] [L3837] RET call #t~ret78 := usb_maxpacket(~dev~1, ~pipe~0, (if 0 == ~bitwiseAnd(~pipe~0, 128) then 1 else 0)); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret78=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3837] ~tmp___10~0 := #t~ret78; [L3837] havoc #t~ret78; [L3838] ~maxp~0 := ~tmp___10~0 % 65536; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] CALL call #t~ret79 := kzalloc(232, 208); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=232, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967345, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967345, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp___2~0!base=4294967386, ~tmp___2~0!offset=-38] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967386, #t~ret8!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=208, #in~size=232, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=208, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=232, ~tmp~0!base=4294967386, ~tmp~0!offset=-38] [L3839] RET call #t~ret79 := kzalloc(232, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret79!base=4294967386, #t~ret79!offset=-38, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3839] ~tmp___11~0 := #t~ret79; [L3839] havoc #t~ret79; [L3840] ~mouse~3 := ~tmp___11~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] CALL call #t~ret80 := input_allocate_device(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] CALL call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3395-L3404] ~size := #in~size; [L3395-L3404] ~flags := #in~flags; [L3396] havoc ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] CALL call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~size=1928, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3384-L3394] ~size := #in~size; [L3384-L3394] ~flags := #in~flags; [L3386] havoc ~tmp___2~0; [L3390] FCALL call #t~ret7 := __kmalloc(~size, ~flags); [L3390] ~tmp___2~0 := #t~ret7; [L3390] havoc #t~ret7; [L3392] #res := ~tmp___2~0; VAL [#in~flags=4294967381, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967381, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp___2~0!base=4294967339, ~tmp___2~0!offset=-24] [L3400] RET call #t~ret8 := kmalloc(~size, ~bitwiseOr(~flags, 32768)); VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #t~ret8!base=4294967339, #t~ret8!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928] [L3400] ~tmp~0 := #t~ret8; [L3400] havoc #t~ret8; [L3402] #res := ~tmp~0; VAL [#in~flags=4294967313, #in~size=1928, #NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~flags=4294967313, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0, ~size=1928, ~tmp~0!base=4294967339, ~tmp~0!offset=-24] [L3599] RET call #t~ret34 := kzalloc(1928, ~bitwiseOr(~bitwiseOr(16, 64), 128)); VAL [#NULL!base=0, #NULL!offset=0, #t~ret34!base=4294967339, #t~ret34!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3599] #res := #t~ret34; [L3599] havoc #t~ret34; VAL [#NULL!base=0, #NULL!offset=0, #res!base=4294967339, #res!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L3841] RET call #t~ret80 := input_allocate_device(); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret80!base=4294967339, #t~ret80!offset=-24, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3841] ~input_dev~0 := #t~ret80; [L3841] havoc #t~ret80; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3843] COND FALSE !(~mouse~3 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3846] COND FALSE !(~input_dev~0 == { base: 0, offset: 0 }) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] CALL call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4177-L4204] ~dev := #in~dev; [L4177-L4204] ~size := #in~size; [L4177-L4204] ~mem_flags := #in~mem_flags; [L4177-L4204] ~dma := #in~dma; [L4179] havoc ~arbitrary_memory~0; [L4180] havoc ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4184-L4198] COND FALSE !(false) VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8] [L4187] FCALL call #t~ret133 := ldv_undefined_pointer(); [L4187] ~tmp___7~12 := #t~ret133; [L4187] havoc #t~ret133; [L4188] ~arbitrary_memory~0 := ~tmp___7~12; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L4190] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L4195] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L4196] #res := ~arbitrary_memory~0; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~dma!base=4294967386, #in~dma!offset=186, #in~mem_flags=32, #in~size=8, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~0!base=4294967386, ~arbitrary_memory~0!offset=66, ~dev!base=4294967339, ~dev!offset=0, ~dma!base=4294967386, ~dma!offset=186, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_usb_mouse_probe_3~0=0, ~size=8, ~tmp___7~12!base=4294967386, ~tmp___7~12!offset=66] [L3852] RET call #t~ret81 := usb_alloc_coherent(~dev~1, 8, 32, { base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret81!base=4294967386, #t~ret81!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3852] ~tmp___12~0 := #t~ret81; [L3852] havoc #t~ret81; [L3853] FCALL call write~$Pointer$(~tmp___12~0, { base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3855] FCALL call #t~mem82 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=4294967386, #t~mem82!offset=66, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3855] COND FALSE !(#t~mem82 == { base: 0, offset: 0 }) [L3855] havoc #t~mem82; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] CALL call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_usb_mouse_probe_3~0=0] [L4241-L4267] ~iso_packets := #in~iso_packets; [L4241-L4267] ~mem_flags := #in~mem_flags; [L4242] havoc ~arbitrary_memory~1; [L4243] havoc ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4247-L4261] COND FALSE !(false) VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0] [L4250] FCALL call #t~ret134 := ldv_undefined_pointer(); [L4250] ~tmp___7~13 := #t~ret134; [L4250] havoc #t~ret134; [L4251] ~arbitrary_memory~1 := ~tmp___7~13; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L4253] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L4258] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L4259] #res := ~arbitrary_memory~1; VAL [#in~iso_packets=0, #in~mem_flags=208, #NULL!base=0, #NULL!offset=0, #res!base=4294967386, #res!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~arbitrary_memory~1!base=4294967386, ~arbitrary_memory~1!offset=74, ~iso_packets=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=208, ~res_usb_mouse_probe_3~0=0, ~tmp___7~13!base=4294967386, ~tmp___7~13!offset=74] [L3861] RET call #t~ret83 := usb_alloc_urb(0, 208); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret83!base=4294967386, #t~ret83!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3861] FCALL call write~$Pointer$(#t~ret83, { base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3861] havoc #t~ret83; [L3863] FCALL call #t~mem84 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem84!base=4294967386, #t~mem84!offset=74, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3863] COND FALSE !(#t~mem84 == { base: 0, offset: 0 }) [L3863] havoc #t~mem84; [L3868] FCALL call write~$Pointer$(~dev~1, { base: ~mouse~3!base, offset: 192 + ~mouse~3!offset }, 8); [L3869] FCALL call write~$Pointer$(~input_dev~0, { base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3870] FCALL call #t~mem85 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem85!base=4294967395, #t~mem85!offset=4294967394, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3870-L3876] COND TRUE #t~mem85 != { base: 0, offset: 0 } [L3870] havoc #t~mem85; [L3872] FCALL call #t~mem86 := read~$Pointer$({ base: ~dev~1!base, offset: 1567 + ~dev~1!offset }, 8); [L3872] FCALL call #t~ret87 := strlcpy({ base: ~mouse~3!base, offset: ~mouse~3!offset }, #t~mem86, 128); [L3872] havoc #t~ret87; [L3872] havoc #t~mem86; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877] FCALL call #t~mem88 := read~$Pointer$({ base: ~dev~1!base, offset: 1559 + ~dev~1!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem88!base=0, #t~mem88!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3877-L3890] COND FALSE !(#t~mem88 != { base: 0, offset: 0 }) [L3877] havoc #t~mem88; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3892] ~tmp___13~0 := #t~nondet94; [L3892] havoc #t~nondet94; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3894-L3901] COND FALSE !(0 != ~tmp___13~0 % 18446744073709551616) [L3898-L3899] havoc #t~nondet95; [L3898] FCALL call #t~mem97 := read~int({ base: ~dev~1!base, offset: 1237 + ~dev~1!offset }, 2); [L3899] FCALL call #t~mem98 := read~int({ base: ~dev~1!base, offset: 1239 + ~dev~1!offset }, 2); [L3898] havoc #t~mem97; [L3899] havoc #t~mem98; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] CALL call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3480-L3495] ~dev := #in~dev; [L3480-L3495] ~buf := #in~buf; [L3480-L3495] ~size := #in~size; [L3481] havoc ~actual~0; [L3482] havoc ~tmp___7~1; [L3486] havoc #t~nondet16; [L3486] FCALL call #t~mem18 := read~$Pointer$({ base: ~dev!base, offset: 60 + ~dev!offset }, 8); [L3486] FCALL call #t~mem19 := read~$Pointer$({ base: #t~mem18!base, offset: 12 + #t~mem18!offset }, 8); [L3486] ~actual~0 := #t~nondet16; [L3486] havoc #t~mem19; [L3486] havoc #t~mem18; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64] [L3488] COND TRUE ~actual~0 >= (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296) [L3489] ~tmp___7~1 := -1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3493] #res := ~tmp___7~1; VAL [#in~buf!base=4294967386, #in~buf!offset=90, #in~dev!base=4294967339, #in~dev!offset=0, #in~size=64, #NULL!base=0, #NULL!offset=0, #res=-1, #t~nondet16=65, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~actual~0=65, ~buf!base=4294967386, ~buf!offset=90, ~dev!base=4294967339, ~dev!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~size=64, ~tmp___7~1=-1] [L3903] RET call #t~ret99 := usb_make_path(~dev~1, { base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, 64); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret99=-1, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3903] assume -2147483648 <= #t~ret99 && #t~ret99 <= 2147483647; [L3903] havoc #t~ret99; [L3904] FCALL call #t~ret101 := strlcat({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, #t~string100, 64); [L3904] havoc #t~ret101; [L3905] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: ~mouse~3!offset }, { base: ~input_dev~0!base, offset: ~input_dev~0!offset }, 8); [L3906] FCALL call write~$Pointer$({ base: ~mouse~3!base, offset: 128 + ~mouse~3!offset }, { base: ~input_dev~0!base, offset: 8 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3907] CALL call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3659-L3669] ~dev := #in~dev; [L3659-L3669] ~id := #in~id; [L3663] FCALL call write~int(3, { base: ~id!base, offset: ~id!offset }, 2); [L3664] FCALL call #t~mem39 := read~int({ base: ~dev!base, offset: 1237 + ~dev!offset }, 2); [L3664] FCALL call write~int(#t~mem39, { base: ~id!base, offset: 2 + ~id!offset }, 2); [L3664] havoc #t~mem39; [L3665] FCALL call #t~mem40 := read~int({ base: ~dev!base, offset: 1239 + ~dev!offset }, 2); [L3665] FCALL call write~int(#t~mem40, { base: ~id!base, offset: 4 + ~id!offset }, 2); [L3665] havoc #t~mem40; [L3666] FCALL call #t~mem41 := read~int({ base: ~dev!base, offset: 1241 + ~dev!offset }, 2); [L3666] FCALL call write~int(#t~mem41, { base: ~id!base, offset: 6 + ~id!offset }, 2); [L3666] havoc #t~mem41; VAL [#in~dev!base=4294967339, #in~dev!offset=0, #in~id!base=4294967339, #in~id!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev!base=4294967339, ~dev!offset=0, ~id!base=4294967339, ~id!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3907] RET call usb_to_input_id(~dev~1, { base: ~input_dev~0!base, offset: 24 + ~input_dev~0!offset }); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3908] FCALL call write~$Pointer$({ base: ~intf!base, offset: 68 + ~intf!offset }, { base: ~input_dev~0!base, offset: 798 + ~input_dev~0!offset }, 8); [L3909] FCALL call write~int(~bitwiseOr(2, 4), { base: ~input_dev~0!base, offset: 40 + ~input_dev~0!offset }, 8); [L3910] FCALL call write~int(~bitwiseOr(~bitwiseOr(65536, 131072), 262144), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3911] FCALL call write~int(~bitwiseOr(1, 2), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3912] FCALL call #t~mem102 := read~int({ base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] FCALL call write~int(~bitwiseOr(#t~mem102, ~bitwiseOr(524288, 1048576)), { base: ~input_dev~0!base, offset: 80 + ~input_dev~0!offset }, 8); [L3912] havoc #t~mem102; [L3913] FCALL call #t~mem103 := read~int({ base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] FCALL call write~int(~bitwiseOr(#t~mem103, 256), { base: ~input_dev~0!base, offset: 144 + ~input_dev~0!offset }, 8); [L3913] havoc #t~mem103; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3914] CALL call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3613-L3622] ~dev := #in~dev; [L3613-L3622] ~data := #in~data; [L3618] FCALL call #t~ret36 := dev_set_drvdata({ base: ~dev!base, offset: 798 + ~dev!offset }, ~data); [L3618] assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647; [L3618] havoc #t~ret36; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~dev!base=4294967339, #in~dev!offset=-24, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~dev!base=4294967339, ~dev!offset=-24, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3914] RET call input_set_drvdata(~input_dev~0, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3915] FCALL call write~$Pointer$(#funAddr~usb_mouse_open, { base: ~input_dev~0!base, offset: 536 + ~input_dev~0!offset }, 8); [L3916] FCALL call write~$Pointer$(#funAddr~usb_mouse_close, { base: ~input_dev~0!base, offset: 544 + ~input_dev~0!offset }, 8); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3918] COND FALSE !(~maxp~0 > 8) [L3921] ~tmp___14~0 := ~maxp~0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] FCALL call #t~mem104 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3924] FCALL call #t~mem105 := read~$Pointer$({ base: ~mouse~3!base, offset: 216 + ~mouse~3!offset }, 8); [L3925] FCALL call #t~mem106 := read~int({ base: ~endpoint~0!base, offset: 6 + ~endpoint~0!offset }, 1); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924-L3925] CALL call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3508-L3532] ~urb := #in~urb; [L3508-L3532] ~dev := #in~dev; [L3508-L3532] ~pipe := #in~pipe; [L3508-L3532] ~transfer_buffer := #in~transfer_buffer; [L3508-L3532] ~buffer_length := #in~buffer_length; [L3508-L3532] ~complete_fn := #in~complete_fn; [L3508-L3532] ~context := #in~context; [L3508-L3532] ~interval := #in~interval; [L3515] FCALL call write~$Pointer$(~dev, { base: ~urb!base, offset: 64 + ~urb!offset }, 8); [L3516] FCALL call write~int(~pipe, { base: ~urb!base, offset: 80 + ~urb!offset }, 4); [L3517] FCALL call write~$Pointer$(~transfer_buffer, { base: ~urb!base, offset: 96 + ~urb!offset }, 8); [L3518] FCALL call write~int(~buffer_length, { base: ~urb!base, offset: 124 + ~urb!offset }, 4); [L3519] FCALL call write~$Pointer$(~complete_fn, { base: ~urb!base, offset: 172 + ~urb!offset }, 8); [L3520] FCALL call write~$Pointer$(~context, { base: ~urb!base, offset: 164 + ~urb!offset }, 8); [L3521] FCALL call #t~mem26 := read~int({ base: ~dev!base, offset: 28 + ~dev!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~mem26=4294967299, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3521] COND TRUE 3 == #t~mem26 % 4294967296 [L3521] havoc #t~mem26; [L3522] FCALL call write~int(~shiftLeft(1, ~interval - 1), { base: ~urb!base, offset: 156 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3529] FCALL call write~int(-1, { base: ~urb!base, offset: 148 + ~urb!offset }, 4); VAL [#in~buffer_length=0, #in~complete_fn!base=-1, #in~complete_fn!offset=2, #in~context!base=4294967386, #in~context!offset=-38, #in~dev!base=4294967339, #in~dev!offset=0, #in~interval=0, #in~pipe=0, #in~transfer_buffer!base=4294967386, #in~transfer_buffer!offset=66, #in~urb!base=4294967386, #in~urb!offset=74, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~buffer_length=0, ~complete_fn!base=-1, ~complete_fn!offset=2, ~context!base=4294967386, ~context!offset=-38, ~dev!base=4294967339, ~dev!offset=0, ~interval=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~pipe=0, ~res_usb_mouse_probe_3~0=0, ~transfer_buffer!base=4294967386, ~transfer_buffer!offset=66, ~urb!base=4294967386, ~urb!offset=74] [L3924-L3925] RET call usb_fill_int_urb(#t~mem104, ~dev~1, ~pipe~0, #t~mem105, ~tmp___14~0, #funAddr~usb_mouse_irq, ~mouse~3, #t~mem106 % 256); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem104!base=4294967386, #t~mem104!offset=74, #t~mem105!base=4294967386, #t~mem105!offset=66, #t~mem106=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=-12, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336] [L3924] havoc #t~mem105; [L3925] havoc #t~mem106; [L3924] havoc #t~mem104; [L3926] FCALL call #t~mem107 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3926] FCALL call #t~mem108 := read~int({ base: ~mouse~3!base, offset: 224 + ~mouse~3!offset }, 8); [L3926] FCALL call write~int(#t~mem108, { base: #t~mem107!base, offset: 104 + #t~mem107!offset }, 8); [L3926] havoc #t~mem108; [L3926] havoc #t~mem107; [L3927] FCALL call #t~mem109 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem110 := read~$Pointer$({ base: ~mouse~3!base, offset: 208 + ~mouse~3!offset }, 8); [L3927] FCALL call #t~mem111 := read~int({ base: #t~mem110!base, offset: 92 + #t~mem110!offset }, 4); [L3927] FCALL call write~int(~bitwiseOr(#t~mem111, 4), { base: #t~mem109!base, offset: 92 + #t~mem109!offset }, 4); [L3927] havoc #t~mem110; [L3927] havoc #t~mem109; [L3927] havoc #t~mem111; [L3928] FCALL call #t~mem112 := read~$Pointer$({ base: ~mouse~3!base, offset: 200 + ~mouse~3!offset }, 8); [L3928] FCALL call #t~ret113 := input_register_device(#t~mem112); [L3928] assume -2147483648 <= #t~ret113 && #t~ret113 <= 2147483647; [L3928] ~tmp~2 := #t~ret113; [L3928] havoc #t~mem112; [L3928] havoc #t~ret113; [L3929] ~error~0 := ~tmp~2; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3931-L3935] COND FALSE !(0 != ~error~0) VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3937] CALL call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=4294967386, #in~data!offset=-38, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=4294967386, ~data!offset=-38, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3937] RET call usb_set_intfdata(~intf, ~mouse~3); VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L3939] #res := 0; VAL [#in~id!base=4294967327, #in~id!offset=4294967392, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~dev~1!base=4294967339, ~dev~1!offset=0, ~endpoint~0!base=4294967321, ~endpoint~0!offset=0, ~error~0=0, ~id!base=4294967327, ~id!offset=4294967392, ~input_dev~0!base=4294967339, ~input_dev~0!offset=-24, ~interface~0!base=4294967330, ~interface~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~maxp~0=0, ~mouse~3!base=4294967386, ~mouse~3!offset=-38, ~pipe~0=0, ~res_usb_mouse_probe_3~0=0, ~tmp___10~0=0, ~tmp___11~0!base=4294967386, ~tmp___11~0!offset=-38, ~tmp___12~0!base=4294967386, ~tmp___12~0!offset=66, ~tmp___13~0=0, ~tmp___14~0=0, ~tmp___7~7!base=4294967339, ~tmp___7~7!offset=0, ~tmp___8~2=1, ~tmp___9~0=4294967336, ~tmp~2=0] [L4111] RET call #t~ret132 := usb_mouse_probe(~var_group1~0, ~var_usb_mouse_probe_3_p1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret132=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4111] assume -2147483648 <= #t~ret132 && #t~ret132 <= 2147483647; [L4111] ~res_usb_mouse_probe_3~0 := #t~ret132; [L4111] havoc #t~ret132; [L4112] FCALL call ldv_check_return_value(~res_usb_mouse_probe_3~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4114-L4118] COND FALSE !(0 != ~res_usb_mouse_probe_3~0) [L4119] ~ldv_s_usb_mouse_driver_usb_driver~0 := 1 + ~ldv_s_usb_mouse_driver_usb_driver~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND TRUE 0 != ~tmp___9~1 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=0, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4098] assume -2147483648 <= #t~nondet131 && #t~nondet131 <= 2147483647; [L4098] ~tmp___8~4 := #t~nondet131; [L4098] havoc #t~nondet131; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4100] COND FALSE !(0 == ~tmp___8~4) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4103] COND TRUE 1 == ~tmp___8~4 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4125] COND TRUE 1 == ~ldv_s_usb_mouse_driver_usb_driver~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4127] CALL call usb_mouse_disconnect(~var_group1~0); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3956-L3981] ~intf := #in~intf; [L3957] havoc ~mouse~4; [L3958] havoc ~tmp___7~8; [L3959] havoc ~tmp___8~3; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] CALL call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3450-L3459] ~intf := #in~intf; [L3451] havoc ~tmp___7~0; [L3455] FCALL call #t~ret13 := dev_get_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }); [L3455] ~tmp___7~0 := #t~ret13; [L3455] havoc #t~ret13; [L3457] #res := ~tmp___7~0; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~0!base=0, ~tmp___7~0!offset=0] [L3963] RET call #t~ret117 := usb_get_intfdata(~intf); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret117!base=0, #t~ret117!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3963] ~tmp___7~8 := #t~ret117; [L3963] havoc #t~ret117; [L3964] ~mouse~4 := ~tmp___7~8; VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3965] CALL call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3462-L3471] ~intf := #in~intf; [L3462-L3471] ~data := #in~data; [L3467] FCALL call #t~ret14 := dev_set_drvdata({ base: ~intf!base, offset: 68 + ~intf!offset }, ~data); [L3467] assume -2147483648 <= #t~ret14 && #t~ret14 <= 2147483647; [L3467] havoc #t~ret14; VAL [#in~data!base=0, #in~data!offset=0, #in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~data!base=0, ~data!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3965] RET call usb_set_intfdata(~intf, { base: 0, offset: 0 }); VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L3967-L3978] COND FALSE !(~mouse~4 != { base: 0, offset: 0 }) VAL [#in~intf!base=4294967302, #in~intf!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=1, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~intf!base=4294967302, ~intf!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mouse~4!base=0, ~mouse~4!offset=0, ~res_usb_mouse_probe_3~0=0, ~tmp___7~8!base=0, ~tmp___7~8!offset=0] [L4127] RET call usb_mouse_disconnect(~var_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4128] ~ldv_s_usb_mouse_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4084-L4140] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=1, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4087] assume -2147483648 <= #t~nondet130 && #t~nondet130 <= 2147483647; [L4087] ~tmp___9~1 := #t~nondet130; [L4087] havoc #t~nondet130; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4089-L4096] COND FALSE !(0 != ~tmp___9~1) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4092] COND FALSE !(!(0 == ~ldv_s_usb_mouse_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4146] CALL call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4032] FCALL call usb_deregister(~#usb_mouse_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4146] RET call usb_mouse_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_usb_mouse_driver_usb_driver~0=0, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0, ~tmp___7~11=0, ~tmp___8~4=1, ~tmp___9~1=0, ~var_group1~0!base=4294967302, ~var_group1~0!offset=0, ~var_usb_mouse_probe_3_p1~0!base=4294967327, ~var_usb_mouse_probe_3_p1~0!offset=4294967392] [L4150] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4308] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4312] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L4159] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=4294967368, #t~string100!offset=0, #t~string124!base=4294967385, #t~string124!offset=0, #t~string127!base=4294967356, #t~string127!offset=0, #t~string17!base=4294967397, #t~string17!offset=0, #t~string23!base=4294967326, #t~string23!offset=0, #t~string29!base=4294967328, #t~string29!offset=0, #t~string31!base=4294967407, #t~string31!offset=0, #t~string59!base=4294967307, #t~string59!offset=0, #t~string90!base=1, #t~string90!offset=0, #t~string96!base=4294967312, #t~string96!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_usb_mouse_probe_3~0)=0, ~#usb_mouse_driver~0!base=4294967340, ~#usb_mouse_driver~0!offset=0, ~#usb_mouse_id_table~0!base=4294967373, ~#usb_mouse_id_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_usb_mouse_probe_3~0=0] [L3670-L3681] static char const __mod_author48[39] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'a', (char const )'u', (char const )'t', (char const )'h', (char const )'o', (char const )'r', (char const )'=', (char const )'V', (char const )'o', (char const )'j', (char const )'t', (char const )'e', (char const )'c', (char const )'h', (char const )' ', (char const )'P', (char const )'a', (char const )'v', (char const )'l', (char const )'i', (char const )'k', (char const )' ', (char const )'<', (char const )'v', (char const )'o', (char const )'j', (char const )'t', (char const )'e', (char const )'c', (char const )'h', (char const )'@', (char const )'u', (char const )'c', (char const )'w', (char const )'.', (char const )'c', (char const )'z', (char const )'>', (char const )'\000'}; [L3682-L3695] static char const __mod_description49[47] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'d', (char const )'e', (char const )'s', (char const )'c', (char const )'r', (char const )'i', (char const )'p', (char const )'t', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'U', (char const )'S', (char const )'B', (char const )' ', (char const )'H', (char const )'I', (char const )'D', (char const )' ', (char const )'B', (char const )'o', (char const )'o', (char const )'t', (char const )' ', (char const )'P', (char const )'r', (char const )'o', (char const )'t', (char const )'o', (char const )'c', (char const )'o', (char const )'l', (char const )' ', (char const )'m', (char const )'o', (char const )'u', (char const )'s', (char const )'e', (char const )' ', (char const )'d', (char const )'r', (char const )'i', (char const )'v', (char const )'e', (char const )'r', (char const )'\000'}; [L3696-L3700] static char const __mod_license50[12] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'l', (char const )'i', (char const )'c', (char const )'e', (char const )'n', (char const )'s', (char const )'e', (char const )'=', (char const )'G', (char const )'P', (char const )'L', (char const )'\000'}; [L4061] int LDV_IN_INTERRUPT ; [L4062] static int res_usb_mouse_probe_3 ; [L4173] int ldv_urb_state = 0; [L4174] int ldv_coherent_state = 0; [L3982-L3984] static struct usb_device_id usb_mouse_id_table[1] = { {(__u16 )896, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (__u8 )3, (__u8 )1, (__u8 )2, 0UL}}; [L3987-L4003] static struct usb_driver usb_mouse_driver = {"usbmouse", & usb_mouse_probe, & usb_mouse_disconnect, (int (*)(struct usb_interface *intf , unsigned int code , void *buf ))0, (int (*)(struct usb_interface *intf , pm_message_t message ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (struct usb_device_id const *)(usb_mouse_id_table), {{{{{0U}, 0U, 0U, (void *)0, {(struct lock_class_key *)0, {(struct lock_class *)0, (struct lock_class *)0}, (char const *)0, 0, 0UL}}}}, {(struct list_head *)0, (struct list_head *)0}}, {{(char const *)0, (struct bus_type *)0, (struct module *)0, (char const *)0, (_Bool)0, (struct of_device_id const *)0, (int (*)(struct device *dev ))0, (int (*)(struct device *dev ))0, (void (*)(struct device *dev ))0, (int (*)(struct device *dev , pm_message_t state ))0, (int (*)(struct device *dev ))0, (struct attribute_group const **)0, (struct dev_pm_ops const *)0, (struct driver_private *)0}, 0}, 0U, 0U, 0U}; VAL [\old(ldv_coherent_state)=4294967300, \old(LDV_IN_INTERRUPT)=4294967315, \old(ldv_urb_state)=4294967351, \old(res_usb_mouse_probe_3)=4294967404, \old(usb_mouse_driver)=null, \old(usb_mouse_driver)=null, \old(usb_mouse_id_table)=null, \old(usb_mouse_id_table)=null, ldv_coherent_state=0, LDV_IN_INTERRUPT=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4064] struct usb_interface *var_group1 ; [L4065] struct usb_device_id const *var_usb_mouse_probe_3_p1 ; [L4066] int tmp___7 ; [L4067] int ldv_s_usb_mouse_driver_usb_driver ; [L4068] int tmp___8 ; [L4069] int tmp___9 ; [L4073] LDV_IN_INTERRUPT = 1 [L4075] CALL, EXPR usb_mouse_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4007] int retval ; [L4008] int tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4012] CALL, EXPR usb_register(& usb_mouse_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, driver={4294967340:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3498] int tmp___7 ; [L3502] tmp___7 = usb_register_driver(driver, & __this_module, "usbmouse") [L3504] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, driver={4294967340:0}, driver={4294967340:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4012] RET, EXPR usb_register(& usb_mouse_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_register(& usb_mouse_driver)=0] [L4012] tmp___7 = usb_register(& usb_mouse_driver) [L4013] retval = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, retval=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4015] COND TRUE retval == 0 [L4022] return (retval); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, retval=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4075] RET, EXPR usb_mouse_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_mouse_init()=0] [L4075] tmp___7 = usb_mouse_init() [L4077] COND FALSE !(\read(tmp___7)) [L4082] ldv_s_usb_mouse_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4098] tmp___8 = __VERIFIER_nondet_int() [L4100] COND TRUE tmp___8 == 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4109] COND TRUE ldv_s_usb_mouse_driver_usb_driver == 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4111] CALL, EXPR usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3795] struct usb_device *dev ; [L3796] struct usb_device *tmp___7 ; [L3797] struct usb_host_interface *interface ; [L3798] struct usb_endpoint_descriptor *endpoint ; [L3799] struct usb_mouse *mouse ; [L3800] struct input_dev *input_dev ; [L3801] int pipe ; [L3802] int maxp ; [L3803] int error ; [L3804] int tmp___8 ; [L3805] unsigned int tmp___9 ; [L3806] __u16 tmp___10 ; [L3807] void *tmp___11 ; [L3808] void *tmp___12 ; [L3809] unsigned long tmp___13 ; [L3810] int tmp___14 ; [L3811] int tmp ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, id={4294967327:4294967392}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] CALL, EXPR interface_to_usbdev(intf) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3473] struct device const *__mptr ; [L3476] EXPR intf->dev.parent [L3476] __mptr = (struct device const *)intf->dev.parent [L3477] return ((struct usb_device *)((char *)__mptr - (unsigned int )(& ((struct usb_device *)0)->dev))); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result={4294967339:0}, __mptr={4294967339:131}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] RET, EXPR interface_to_usbdev(intf) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, id={4294967327:4294967392}, interface_to_usbdev(intf)={4294967339:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] tmp___7 = interface_to_usbdev(intf) [L3816] dev = tmp___7 [L3817] error = -12 [L3818] EXPR intf->cur_altsetting [L3818] interface = intf->cur_altsetting [L3820] EXPR interface->desc.bNumEndpoints VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, interface->desc.bNumEndpoints=-255, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3820] COND FALSE !((int )interface->desc.bNumEndpoints != 1) [L3826] EXPR interface->endpoint [L3826] endpoint = & (interface->endpoint + 0)->desc [L3827] CALL, EXPR usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3423] int tmp ; [L3424] int tmp___0 ; [L3425] int tmp___1 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3429] CALL, EXPR usb_endpoint_xfer_int(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3419] EXPR epd->bmAttributes [L3419] return (((int const )epd->bmAttributes & 3) == 3); [L3429] RET, EXPR usb_endpoint_xfer_int(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_endpoint_xfer_int(epd)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3429] tmp = usb_endpoint_xfer_int(epd) [L3431] COND TRUE \read(tmp) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3433] CALL, EXPR usb_endpoint_dir_in(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3412] EXPR epd->bEndpointAddress [L3412] return (((int const )epd->bEndpointAddress & 128) == 128); [L3433] RET, EXPR usb_endpoint_dir_in(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, usb_endpoint_dir_in(epd)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3433] tmp___0 = usb_endpoint_dir_in(epd) [L3435] COND TRUE \read(tmp___0) [L3436] tmp___1 = 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, tmp___0=1, tmp___1=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3443] return (tmp___1); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=1, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, tmp___0=1, tmp___1=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3827] RET, EXPR usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3827] tmp___8 = usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) [L3829] COND TRUE \read(tmp___8) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] EXPR endpoint->bEndpointAddress VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bEndpointAddress=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] CALL, EXPR __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) VAL [\old(endpoint)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3544] EXPR dev->devnum [L3544] return ((unsigned int )(dev->devnum << 8) | (endpoint << 15)); [L3835] RET, EXPR __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress)=4294967336, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bEndpointAddress=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] tmp___9 = __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) [L3836] pipe = (int )(((unsigned int )(1 << 30) | tmp___9) | 128U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] CALL, EXPR usb_maxpacket(dev, pipe, ! (pipe & 128)) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3548] struct usb_host_endpoint *ep ; [L3549] unsigned int epnum ; [L3550] int __ret_warn_on ; [L3551] long tmp___7 ; [L3552] int __ret_warn_on___0 ; [L3553] long tmp___8 ; [L3556] epnum = (unsigned int )((pipe >> 15) & 15) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3557] COND FALSE !(\read(is_out)) [L3575] __ret_warn_on___0 = ! (! (! (pipe & 128))) [L3576] tmp___8 = __builtin_expect((long )(! (! __ret_warn_on___0)), 0L) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, __ret_warn_on___0=1, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___8=1, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3578] COND TRUE \read(tmp___8) [L3587] EXPR udev->ep_in[epnum] [L3587] ep = udev->ep_in[epnum] [L3590] COND TRUE ! ep [L3591] return ((__u16 )0); VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, \result=0, __ret_warn_on___0=1, ep={0:0}, epnum=0, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___8=1, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] RET, EXPR usb_maxpacket(dev, pipe, ! (pipe & 128)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_maxpacket(dev, pipe, ! (pipe & 128))=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] tmp___10 = usb_maxpacket(dev, pipe, ! (pipe & 128)) [L3838] maxp = (int )tmp___10 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] CALL, EXPR kzalloc(sizeof(struct usb_mouse ), 208U) VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3396] void *tmp ; VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, flags=208, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] CALL, EXPR kmalloc(size, flags | 32768U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3386] void *tmp___2 ; [L3390] tmp___2 = __kmalloc(size, flags) [L3392] return (tmp___2); VAL [\old(flags)=49, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, \result={4294967386:-38}, flags=49, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, tmp___2={4294967386:-38}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, flags=208, kmalloc(size, flags | 32768U)={4294967386:-38}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] tmp = kmalloc(size, flags | 32768U) [L3402] return (tmp); VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, \result={4294967386:-38}, flags=208, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, tmp={4294967386:-38}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] RET, EXPR kzalloc(sizeof(struct usb_mouse ), 208U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, kzalloc(sizeof(struct usb_mouse ), 208U)={4294967386:-38}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] tmp___11 = kzalloc(sizeof(struct usb_mouse ), 208U) [L3840] mouse = (struct usb_mouse *)tmp___11 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3841] CALL, EXPR input_allocate_device() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] CALL, EXPR kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3396] void *tmp ; VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, flags=17, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] CALL, EXPR kmalloc(size, flags | 32768U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3386] void *tmp___2 ; [L3390] tmp___2 = __kmalloc(size, flags) [L3392] return (tmp___2); VAL [\old(flags)=85, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, \result={4294967339:-24}, flags=85, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, tmp___2={4294967339:-24}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, flags=17, kmalloc(size, flags | 32768U)={4294967339:-24}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] tmp = kmalloc(size, flags | 32768U) [L3402] return (tmp); VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, \result={4294967339:-24}, flags=17, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, tmp={4294967339:-24}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] RET, EXPR kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u)={4294967339:-24}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] return kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u); [L3841] RET, EXPR input_allocate_device() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_allocate_device()={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3841] input_dev = input_allocate_device() [L3843] COND FALSE !(! mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3846] COND FALSE !(! input_dev) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] CALL, EXPR usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4179] void *arbitrary_memory ; [L4180] void *tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4184] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4187] tmp___7 = ldv_undefined_pointer() [L4188] arbitrary_memory = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, arbitrary_memory={4294967386:66}, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, tmp___7={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4190] COND FALSE !(! arbitrary_memory) [L4195] ldv_coherent_state = ldv_coherent_state + 1 [L4196] return (arbitrary_memory); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, \result={4294967386:66}, arbitrary_memory={4294967386:66}, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, tmp___7={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] RET, EXPR usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma)={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] tmp___12 = usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) [L3853] mouse->data = (signed char *)tmp___12 [L3855] EXPR mouse->data VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3855] COND FALSE !(! mouse->data) [L3861] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4242] void *arbitrary_memory ; [L4243] void *tmp___7 ; VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4247] COND TRUE 1 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4250] tmp___7 = ldv_undefined_pointer() [L4251] arbitrary_memory = tmp___7 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, arbitrary_memory={4294967386:74}, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, tmp___7={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4253] COND FALSE !(! arbitrary_memory) [L4258] ldv_urb_state = ldv_urb_state + 1 [L4259] return ((struct urb *)arbitrary_memory); VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, \result={4294967386:74}, arbitrary_memory={4294967386:74}, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=208, res_usb_mouse_probe_3=0, tmp___7={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3861] RET, EXPR usb_alloc_urb(0, 208U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_alloc_urb(0, 208U)={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3861] mouse->irq = usb_alloc_urb(0, 208U) [L3863] EXPR mouse->irq VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3863] COND FALSE !(! mouse->irq) [L3868] mouse->usbdev = dev [L3869] mouse->dev = input_dev [L3870] dev->manufacturer VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, dev->manufacturer={4294967395:4294967394}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3870] COND TRUE dev->manufacturer [L3872] dev->manufacturer [L3877] dev->product VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, dev->product={0:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3877] COND FALSE !(dev->product) [L3892] tmp___13 = strlen((char const *)(mouse->name)) [L3894] COND FALSE !(\read(tmp___13)) [L3898] dev->descriptor.idVendor [L3899] dev->descriptor.idProduct [L3903] CALL usb_make_path(dev, mouse->phys, sizeof(mouse->phys)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, buf={4294967386:90}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3481] int actual ; [L3482] int tmp___7 ; [L3486] EXPR dev->bus [L3486] EXPR (dev->bus)->bus_name [L3486] actual = snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath) [L3488] COND TRUE actual >= (int )size [L3489] tmp___7 = -1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, actual=65, buf={4294967386:90}, buf={4294967386:90}, dev={4294967339:0}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, size=64, snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath)=65, tmp___7=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3493] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, \result=-1, actual=65, buf={4294967386:90}, buf={4294967386:90}, dev={4294967339:0}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, size=64, snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath)=65, tmp___7=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3903] RET usb_make_path(dev, mouse->phys, sizeof(mouse->phys)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_make_path(dev, mouse->phys, sizeof(mouse->phys))=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3905] input_dev->name = (char const *)(mouse->name) [L3906] input_dev->phys = (char const *)(mouse->phys) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3907] CALL usb_to_input_id((struct usb_device const *)dev, & input_dev->id) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, id={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3663] id->bustype = (__u16 )3 [L3664] EXPR dev->descriptor.idVendor [L3664] id->vendor = (__le16 )dev->descriptor.idVendor [L3665] EXPR dev->descriptor.idProduct [L3665] id->product = (__le16 )dev->descriptor.idProduct [L3666] EXPR dev->descriptor.bcdDevice [L3666] id->version = (__le16 )dev->descriptor.bcdDevice [L3907] RET usb_to_input_id((struct usb_device const *)dev, & input_dev->id) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3908] input_dev->dev.parent = & intf->dev [L3909] input_dev->evbit[0] = (1UL << 1) | (1UL << 2) [L3910] input_dev->keybit[4] = ((1UL << 16) | (1UL << 17)) | (1UL << 18) [L3911] input_dev->relbit[0] = 1UL | (1UL << 1) [L3912] EXPR input_dev->keybit[4] [L3912] input_dev->keybit[4] = input_dev->keybit[4] | ((1UL << 19) | (1UL << 20)) [L3913] EXPR input_dev->relbit[0] [L3913] input_dev->relbit[0] = input_dev->relbit[0] | (1UL << 8) [L3914] CALL input_set_drvdata(input_dev, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, data={4294967386:-38}, dev={4294967339:-24}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3914] RET input_set_drvdata(input_dev, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3915] input_dev->open = & usb_mouse_open [L3916] input_dev->close = & usb_mouse_close VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3918] COND FALSE !(maxp > 8) [L3921] tmp___14 = maxp VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924] EXPR mouse->irq [L3924] EXPR mouse->data [L3925] EXPR endpoint->bInterval VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bInterval=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924-L3925] CALL usb_fill_int_urb(mouse->irq, dev, (unsigned int )pipe, (void *)mouse->data, tmp___14, & usb_mouse_irq, (void *)mouse, (int )endpoint->bInterval) VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, complete_fn={-1:2}, context={4294967386:-38}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3515] urb->dev = dev [L3516] urb->pipe = pipe [L3517] urb->transfer_buffer = transfer_buffer [L3518] urb->transfer_buffer_length = (u32 )buffer_length [L3519] urb->complete = complete_fn [L3520] urb->context = context [L3521] EXPR dev->speed VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, dev->speed=4294967299, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3521] COND TRUE (unsigned int )dev->speed == 3U [L3522] urb->interval = 1 << (interval - 1) VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3529] urb->start_frame = -1 VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924-L3925] RET usb_fill_int_urb(mouse->irq, dev, (unsigned int )pipe, (void *)mouse->data, tmp___14, & usb_mouse_irq, (void *)mouse, (int )endpoint->bInterval) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bInterval=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3926] EXPR mouse->irq [L3926] EXPR mouse->data_dma [L3926] (mouse->irq)->transfer_dma = mouse->data_dma [L3927] EXPR mouse->irq [L3927] EXPR mouse->irq [L3927] EXPR (mouse->irq)->transfer_flags [L3927] (mouse->irq)->transfer_flags = (mouse->irq)->transfer_flags | 4U [L3928] EXPR mouse->dev [L3928] tmp = (int )input_register_device(mouse->dev) [L3929] error = tmp VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3931] COND FALSE !(\read(error)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3937] CALL usb_set_intfdata(intf, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, data={4294967386:-38}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3937] RET usb_set_intfdata(intf, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3939] return (0); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4111] RET, EXPR usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1)=0, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4111] res_usb_mouse_probe_3 = usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) [L4114] COND FALSE !(\read(res_usb_mouse_probe_3)) [L4119] ldv_s_usb_mouse_driver_usb_driver = ldv_s_usb_mouse_driver_usb_driver + 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4098] tmp___8 = __VERIFIER_nondet_int() [L4100] COND FALSE !(tmp___8 == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4103] COND TRUE tmp___8 == 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4125] COND TRUE ldv_s_usb_mouse_driver_usb_driver == 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4127] CALL usb_mouse_disconnect(var_group1) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3957] struct usb_mouse *mouse ; [L3958] void *tmp___7 ; [L3959] struct usb_device *tmp___8 ; VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] CALL, EXPR usb_get_intfdata(intf) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3451] void *tmp___7 ; [L3455] tmp___7 = dev_get_drvdata((struct device const *)(& intf->dev)) [L3457] return (tmp___7); VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, \result={0:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] RET, EXPR usb_get_intfdata(intf) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_get_intfdata(intf)={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] tmp___7 = usb_get_intfdata(intf) [L3964] mouse = (struct usb_mouse *)tmp___7 VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3965] CALL usb_set_intfdata(intf, (void *)0) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, data={0:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3965] RET usb_set_intfdata(intf, (void *)0) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3967] COND FALSE !(\read(*mouse)) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4127] RET usb_mouse_disconnect(var_group1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4128] ldv_s_usb_mouse_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND FALSE !(\read(tmp___9)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4092] COND FALSE !(! (ldv_s_usb_mouse_driver_usb_driver == 0)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4146] CALL usb_mouse_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4146] RET usb_mouse_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4150] CALL ldv_check_final_state() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4308] COND FALSE !(ldv_urb_state == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4312] CALL ldv_blast_assert() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4159] __VERIFIER_error() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] ----- [2018-11-22 22:21:37,104 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.11 10:21:37 BoogieIcfgContainer [2018-11-22 22:21:37,104 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-22 22:21:37,105 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-22 22:21:37,105 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-22 22:21:37,105 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-22 22:21:37,106 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:21:19" (3/4) ... [2018-11-22 22:21:37,109 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-22 22:21:37,109 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-22 22:21:37,110 INFO L168 Benchmark]: Toolchain (without parser) took 19553.35 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 453.0 MB). Free memory was 953.8 MB in the beginning and 951.8 MB in the end (delta: 2.0 MB). Peak memory consumption was 455.0 MB. Max. memory is 11.5 GB. [2018-11-22 22:21:37,111 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:21:37,111 INFO L168 Benchmark]: CACSL2BoogieTranslator took 769.15 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 169.3 MB). Free memory was 953.8 MB in the beginning and 1.1 GB in the end (delta: -157.3 MB). Peak memory consumption was 75.0 MB. Max. memory is 11.5 GB. [2018-11-22 22:21:37,112 INFO L168 Benchmark]: Boogie Procedure Inliner took 33.18 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.4 MB). Peak memory consumption was 3.4 MB. Max. memory is 11.5 GB. [2018-11-22 22:21:37,113 INFO L168 Benchmark]: Boogie Preprocessor took 58.87 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.1 MB). Peak memory consumption was 10.1 MB. Max. memory is 11.5 GB. [2018-11-22 22:21:37,178 INFO L168 Benchmark]: RCFGBuilder took 821.92 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 982.5 MB in the end (delta: 115.1 MB). Peak memory consumption was 115.1 MB. Max. memory is 11.5 GB. [2018-11-22 22:21:37,178 INFO L168 Benchmark]: TraceAbstraction took 17862.58 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 283.6 MB). Free memory was 982.5 MB in the beginning and 951.8 MB in the end (delta: 30.7 MB). Peak memory consumption was 314.4 MB. Max. memory is 11.5 GB. [2018-11-22 22:21:37,179 INFO L168 Benchmark]: Witness Printer took 4.41 ms. Allocated memory is still 1.5 GB. Free memory is still 951.8 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:21:37,182 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 769.15 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 169.3 MB). Free memory was 953.8 MB in the beginning and 1.1 GB in the end (delta: -157.3 MB). Peak memory consumption was 75.0 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 33.18 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.4 MB). Peak memory consumption was 3.4 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 58.87 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.1 MB). Peak memory consumption was 10.1 MB. Max. memory is 11.5 GB. * RCFGBuilder took 821.92 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 982.5 MB in the end (delta: 115.1 MB). Peak memory consumption was 115.1 MB. Max. memory is 11.5 GB. * TraceAbstraction took 17862.58 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 283.6 MB). Free memory was 982.5 MB in the beginning and 951.8 MB in the end (delta: 30.7 MB). Peak memory consumption was 314.4 MB. Max. memory is 11.5 GB. * Witness Printer took 4.41 ms. Allocated memory is still 1.5 GB. Free memory is still 951.8 MB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967317 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967387 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967347 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967306 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 4159]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 3486, overapproximation of strlen at line 3892, overapproximation of bitwiseOr at line 3927, overapproximation of shiftLeft at line 3522, overapproximation of bitwiseAnd at line 3575. Possible FailurePath: [L3670-L3681] static char const __mod_author48[39] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'a', (char const )'u', (char const )'t', (char const )'h', (char const )'o', (char const )'r', (char const )'=', (char const )'V', (char const )'o', (char const )'j', (char const )'t', (char const )'e', (char const )'c', (char const )'h', (char const )' ', (char const )'P', (char const )'a', (char const )'v', (char const )'l', (char const )'i', (char const )'k', (char const )' ', (char const )'<', (char const )'v', (char const )'o', (char const )'j', (char const )'t', (char const )'e', (char const )'c', (char const )'h', (char const )'@', (char const )'u', (char const )'c', (char const )'w', (char const )'.', (char const )'c', (char const )'z', (char const )'>', (char const )'\000'}; [L3682-L3695] static char const __mod_description49[47] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'d', (char const )'e', (char const )'s', (char const )'c', (char const )'r', (char const )'i', (char const )'p', (char const )'t', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'U', (char const )'S', (char const )'B', (char const )' ', (char const )'H', (char const )'I', (char const )'D', (char const )' ', (char const )'B', (char const )'o', (char const )'o', (char const )'t', (char const )' ', (char const )'P', (char const )'r', (char const )'o', (char const )'t', (char const )'o', (char const )'c', (char const )'o', (char const )'l', (char const )' ', (char const )'m', (char const )'o', (char const )'u', (char const )'s', (char const )'e', (char const )' ', (char const )'d', (char const )'r', (char const )'i', (char const )'v', (char const )'e', (char const )'r', (char const )'\000'}; [L3696-L3700] static char const __mod_license50[12] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'l', (char const )'i', (char const )'c', (char const )'e', (char const )'n', (char const )'s', (char const )'e', (char const )'=', (char const )'G', (char const )'P', (char const )'L', (char const )'\000'}; [L4061] int LDV_IN_INTERRUPT ; [L4062] static int res_usb_mouse_probe_3 ; [L4173] int ldv_urb_state = 0; [L4174] int ldv_coherent_state = 0; [L3982-L3984] static struct usb_device_id usb_mouse_id_table[1] = { {(__u16 )896, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (__u8 )3, (__u8 )1, (__u8 )2, 0UL}}; [L3987-L4003] static struct usb_driver usb_mouse_driver = {"usbmouse", & usb_mouse_probe, & usb_mouse_disconnect, (int (*)(struct usb_interface *intf , unsigned int code , void *buf ))0, (int (*)(struct usb_interface *intf , pm_message_t message ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (struct usb_device_id const *)(usb_mouse_id_table), {{{{{0U}, 0U, 0U, (void *)0, {(struct lock_class_key *)0, {(struct lock_class *)0, (struct lock_class *)0}, (char const *)0, 0, 0UL}}}}, {(struct list_head *)0, (struct list_head *)0}}, {{(char const *)0, (struct bus_type *)0, (struct module *)0, (char const *)0, (_Bool)0, (struct of_device_id const *)0, (int (*)(struct device *dev ))0, (int (*)(struct device *dev ))0, (void (*)(struct device *dev ))0, (int (*)(struct device *dev , pm_message_t state ))0, (int (*)(struct device *dev ))0, (struct attribute_group const **)0, (struct dev_pm_ops const *)0, (struct driver_private *)0}, 0}, 0U, 0U, 0U}; VAL [\old(ldv_coherent_state)=4294967300, \old(LDV_IN_INTERRUPT)=4294967315, \old(ldv_urb_state)=4294967351, \old(res_usb_mouse_probe_3)=4294967404, \old(usb_mouse_driver)=null, \old(usb_mouse_driver)=null, \old(usb_mouse_id_table)=null, \old(usb_mouse_id_table)=null, ldv_coherent_state=0, LDV_IN_INTERRUPT=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4064] struct usb_interface *var_group1 ; [L4065] struct usb_device_id const *var_usb_mouse_probe_3_p1 ; [L4066] int tmp___7 ; [L4067] int ldv_s_usb_mouse_driver_usb_driver ; [L4068] int tmp___8 ; [L4069] int tmp___9 ; [L4073] LDV_IN_INTERRUPT = 1 [L4075] CALL, EXPR usb_mouse_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4007] int retval ; [L4008] int tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4012] CALL, EXPR usb_register(& usb_mouse_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, driver={4294967340:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3498] int tmp___7 ; [L3502] tmp___7 = usb_register_driver(driver, & __this_module, "usbmouse") [L3504] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, driver={4294967340:0}, driver={4294967340:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4012] RET, EXPR usb_register(& usb_mouse_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_register(& usb_mouse_driver)=0] [L4012] tmp___7 = usb_register(& usb_mouse_driver) [L4013] retval = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, retval=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4015] COND TRUE retval == 0 [L4022] return (retval); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, retval=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4075] RET, EXPR usb_mouse_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_mouse_init()=0] [L4075] tmp___7 = usb_mouse_init() [L4077] COND FALSE !(\read(tmp___7)) [L4082] ldv_s_usb_mouse_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4098] tmp___8 = __VERIFIER_nondet_int() [L4100] COND TRUE tmp___8 == 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4109] COND TRUE ldv_s_usb_mouse_driver_usb_driver == 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4111] CALL, EXPR usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3795] struct usb_device *dev ; [L3796] struct usb_device *tmp___7 ; [L3797] struct usb_host_interface *interface ; [L3798] struct usb_endpoint_descriptor *endpoint ; [L3799] struct usb_mouse *mouse ; [L3800] struct input_dev *input_dev ; [L3801] int pipe ; [L3802] int maxp ; [L3803] int error ; [L3804] int tmp___8 ; [L3805] unsigned int tmp___9 ; [L3806] __u16 tmp___10 ; [L3807] void *tmp___11 ; [L3808] void *tmp___12 ; [L3809] unsigned long tmp___13 ; [L3810] int tmp___14 ; [L3811] int tmp ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, id={4294967327:4294967392}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] CALL, EXPR interface_to_usbdev(intf) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3473] struct device const *__mptr ; [L3476] EXPR intf->dev.parent [L3476] __mptr = (struct device const *)intf->dev.parent [L3477] return ((struct usb_device *)((char *)__mptr - (unsigned int )(& ((struct usb_device *)0)->dev))); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result={4294967339:0}, __mptr={4294967339:131}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] RET, EXPR interface_to_usbdev(intf) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, id={4294967327:4294967392}, id={4294967327:4294967392}, interface_to_usbdev(intf)={4294967339:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3815] tmp___7 = interface_to_usbdev(intf) [L3816] dev = tmp___7 [L3817] error = -12 [L3818] EXPR intf->cur_altsetting [L3818] interface = intf->cur_altsetting [L3820] EXPR interface->desc.bNumEndpoints VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, interface->desc.bNumEndpoints=-255, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3820] COND FALSE !((int )interface->desc.bNumEndpoints != 1) [L3826] EXPR interface->endpoint [L3826] endpoint = & (interface->endpoint + 0)->desc [L3827] CALL, EXPR usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3423] int tmp ; [L3424] int tmp___0 ; [L3425] int tmp___1 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3429] CALL, EXPR usb_endpoint_xfer_int(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3419] EXPR epd->bmAttributes [L3419] return (((int const )epd->bmAttributes & 3) == 3); [L3429] RET, EXPR usb_endpoint_xfer_int(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_endpoint_xfer_int(epd)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3429] tmp = usb_endpoint_xfer_int(epd) [L3431] COND TRUE \read(tmp) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3433] CALL, EXPR usb_endpoint_dir_in(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3412] EXPR epd->bEndpointAddress [L3412] return (((int const )epd->bEndpointAddress & 128) == 128); [L3433] RET, EXPR usb_endpoint_dir_in(epd) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, usb_endpoint_dir_in(epd)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3433] tmp___0 = usb_endpoint_dir_in(epd) [L3435] COND TRUE \read(tmp___0) [L3436] tmp___1 = 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, tmp___0=1, tmp___1=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3443] return (tmp___1); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=1, epd={4294967321:0}, epd={4294967321:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp=1, tmp___0=1, tmp___1=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3827] RET, EXPR usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint)=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3827] tmp___8 = usb_endpoint_is_int_in((struct usb_endpoint_descriptor const *)endpoint) [L3829] COND TRUE \read(tmp___8) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] EXPR endpoint->bEndpointAddress VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bEndpointAddress=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] CALL, EXPR __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) VAL [\old(endpoint)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3544] EXPR dev->devnum [L3544] return ((unsigned int )(dev->devnum << 8) | (endpoint << 15)); [L3835] RET, EXPR __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress)=4294967336, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bEndpointAddress=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3835] tmp___9 = __create_pipe(dev, (unsigned int )endpoint->bEndpointAddress) [L3836] pipe = (int )(((unsigned int )(1 << 30) | tmp___9) | 128U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] CALL, EXPR usb_maxpacket(dev, pipe, ! (pipe & 128)) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3548] struct usb_host_endpoint *ep ; [L3549] unsigned int epnum ; [L3550] int __ret_warn_on ; [L3551] long tmp___7 ; [L3552] int __ret_warn_on___0 ; [L3553] long tmp___8 ; [L3556] epnum = (unsigned int )((pipe >> 15) & 15) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3557] COND FALSE !(\read(is_out)) [L3575] __ret_warn_on___0 = ! (! (! (pipe & 128))) [L3576] tmp___8 = __builtin_expect((long )(! (! __ret_warn_on___0)), 0L) VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, __ret_warn_on___0=1, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___8=1, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3578] COND TRUE \read(tmp___8) [L3587] EXPR udev->ep_in[epnum] [L3587] ep = udev->ep_in[epnum] [L3590] COND TRUE ! ep [L3591] return ((__u16 )0); VAL [\old(is_out)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, \result=0, __ret_warn_on___0=1, ep={0:0}, epnum=0, is_out=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___8=1, udev={4294967339:0}, udev={4294967339:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] RET, EXPR usb_maxpacket(dev, pipe, ! (pipe & 128)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, pipe=0, res_usb_mouse_probe_3=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_maxpacket(dev, pipe, ! (pipe & 128))=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3837] tmp___10 = usb_maxpacket(dev, pipe, ! (pipe & 128)) [L3838] maxp = (int )tmp___10 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] CALL, EXPR kzalloc(sizeof(struct usb_mouse ), 208U) VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3396] void *tmp ; VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, flags=208, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] CALL, EXPR kmalloc(size, flags | 32768U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3386] void *tmp___2 ; [L3390] tmp___2 = __kmalloc(size, flags) [L3392] return (tmp___2); VAL [\old(flags)=49, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, \result={4294967386:-38}, flags=49, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, tmp___2={4294967386:-38}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, flags=208, kmalloc(size, flags | 32768U)={4294967386:-38}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] tmp = kmalloc(size, flags | 32768U) [L3402] return (tmp); VAL [\old(flags)=208, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=232, \result={4294967386:-38}, flags=208, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=232, tmp={4294967386:-38}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] RET, EXPR kzalloc(sizeof(struct usb_mouse ), 208U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, kzalloc(sizeof(struct usb_mouse ), 208U)={4294967386:-38}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3839] tmp___11 = kzalloc(sizeof(struct usb_mouse ), 208U) [L3840] mouse = (struct usb_mouse *)tmp___11 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3841] CALL, EXPR input_allocate_device() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] CALL, EXPR kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3396] void *tmp ; VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, flags=17, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] CALL, EXPR kmalloc(size, flags | 32768U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3386] void *tmp___2 ; [L3390] tmp___2 = __kmalloc(size, flags) [L3392] return (tmp___2); VAL [\old(flags)=85, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, \result={4294967339:-24}, flags=85, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, tmp___2={4294967339:-24}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, flags=17, kmalloc(size, flags | 32768U)={4294967339:-24}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3400] tmp = kmalloc(size, flags | 32768U) [L3402] return (tmp); VAL [\old(flags)=17, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=1928, \result={4294967339:-24}, flags=17, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, size=1928, tmp={4294967339:-24}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] RET, EXPR kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u)={4294967339:-24}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3599] return kzalloc(sizeof(struct input_dev), 0x10u | 0x40u | 0x80u); [L3841] RET, EXPR input_allocate_device() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_allocate_device()={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3841] input_dev = input_allocate_device() [L3843] COND FALSE !(! mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3846] COND FALSE !(! input_dev) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] CALL, EXPR usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4179] void *arbitrary_memory ; [L4180] void *tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4184] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4187] tmp___7 = ldv_undefined_pointer() [L4188] arbitrary_memory = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, arbitrary_memory={4294967386:66}, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, tmp___7={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4190] COND FALSE !(! arbitrary_memory) [L4195] ldv_coherent_state = ldv_coherent_state + 1 [L4196] return (arbitrary_memory); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_usb_mouse_probe_3)=0, \old(size)=8, \result={4294967386:66}, arbitrary_memory={4294967386:66}, dev={4294967339:0}, dev={4294967339:0}, dma={4294967386:186}, dma={4294967386:186}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_usb_mouse_probe_3=0, size=8, tmp___7={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] RET, EXPR usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma)={4294967386:66}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3852] tmp___12 = usb_alloc_coherent(dev, (size_t )8, 32U, & mouse->data_dma) [L3853] mouse->data = (signed char *)tmp___12 [L3855] EXPR mouse->data VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3855] COND FALSE !(! mouse->data) [L3861] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4242] void *arbitrary_memory ; [L4243] void *tmp___7 ; VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4247] COND TRUE 1 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4250] tmp___7 = ldv_undefined_pointer() [L4251] arbitrary_memory = tmp___7 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, arbitrary_memory={4294967386:74}, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=208, res_usb_mouse_probe_3=0, tmp___7={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4253] COND FALSE !(! arbitrary_memory) [L4258] ldv_urb_state = ldv_urb_state + 1 [L4259] return ((struct urb *)arbitrary_memory); VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=208, \old(res_usb_mouse_probe_3)=0, \result={4294967386:74}, arbitrary_memory={4294967386:74}, iso_packets=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=208, res_usb_mouse_probe_3=0, tmp___7={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3861] RET, EXPR usb_alloc_urb(0, 208U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_alloc_urb(0, 208U)={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3861] mouse->irq = usb_alloc_urb(0, 208U) [L3863] EXPR mouse->irq VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3863] COND FALSE !(! mouse->irq) [L3868] mouse->usbdev = dev [L3869] mouse->dev = input_dev [L3870] dev->manufacturer VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, dev->manufacturer={4294967395:4294967394}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3870] COND TRUE dev->manufacturer [L3872] dev->manufacturer [L3877] dev->product VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, dev->product={0:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3877] COND FALSE !(dev->product) [L3892] tmp___13 = strlen((char const *)(mouse->name)) [L3894] COND FALSE !(\read(tmp___13)) [L3898] dev->descriptor.idVendor [L3899] dev->descriptor.idProduct [L3903] CALL usb_make_path(dev, mouse->phys, sizeof(mouse->phys)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, buf={4294967386:90}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3481] int actual ; [L3482] int tmp___7 ; [L3486] EXPR dev->bus [L3486] EXPR (dev->bus)->bus_name [L3486] actual = snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath) [L3488] COND TRUE actual >= (int )size [L3489] tmp___7 = -1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, actual=65, buf={4294967386:90}, buf={4294967386:90}, dev={4294967339:0}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, size=64, snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath)=65, tmp___7=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3493] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \old(size)=64, \result=-1, actual=65, buf={4294967386:90}, buf={4294967386:90}, dev={4294967339:0}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, size=64, snprintf(buf, size, "usb-%s-%s", (dev->bus)->bus_name, dev->devpath)=65, tmp___7=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3903] RET usb_make_path(dev, mouse->phys, sizeof(mouse->phys)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_make_path(dev, mouse->phys, sizeof(mouse->phys))=-1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3905] input_dev->name = (char const *)(mouse->name) [L3906] input_dev->phys = (char const *)(mouse->phys) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3907] CALL usb_to_input_id((struct usb_device const *)dev, & input_dev->id) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, id={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3663] id->bustype = (__u16 )3 [L3664] EXPR dev->descriptor.idVendor [L3664] id->vendor = (__le16 )dev->descriptor.idVendor [L3665] EXPR dev->descriptor.idProduct [L3665] id->product = (__le16 )dev->descriptor.idProduct [L3666] EXPR dev->descriptor.bcdDevice [L3666] id->version = (__le16 )dev->descriptor.bcdDevice [L3907] RET usb_to_input_id((struct usb_device const *)dev, & input_dev->id) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3908] input_dev->dev.parent = & intf->dev [L3909] input_dev->evbit[0] = (1UL << 1) | (1UL << 2) [L3910] input_dev->keybit[4] = ((1UL << 16) | (1UL << 17)) | (1UL << 18) [L3911] input_dev->relbit[0] = 1UL | (1UL << 1) [L3912] EXPR input_dev->keybit[4] [L3912] input_dev->keybit[4] = input_dev->keybit[4] | ((1UL << 19) | (1UL << 20)) [L3913] EXPR input_dev->relbit[0] [L3913] input_dev->relbit[0] = input_dev->relbit[0] | (1UL << 8) [L3914] CALL input_set_drvdata(input_dev, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, data={4294967386:-38}, dev={4294967339:-24}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3914] RET input_set_drvdata(input_dev, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3915] input_dev->open = & usb_mouse_open [L3916] input_dev->close = & usb_mouse_close VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3918] COND FALSE !(maxp > 8) [L3921] tmp___14 = maxp VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924] EXPR mouse->irq [L3924] EXPR mouse->data [L3925] EXPR endpoint->bInterval VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bInterval=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924-L3925] CALL usb_fill_int_urb(mouse->irq, dev, (unsigned int )pipe, (void *)mouse->data, tmp___14, & usb_mouse_irq, (void *)mouse, (int )endpoint->bInterval) VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, complete_fn={-1:2}, context={4294967386:-38}, dev={4294967339:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3515] urb->dev = dev [L3516] urb->pipe = pipe [L3517] urb->transfer_buffer = transfer_buffer [L3518] urb->transfer_buffer_length = (u32 )buffer_length [L3519] urb->complete = complete_fn [L3520] urb->context = context [L3521] EXPR dev->speed VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, dev->speed=4294967299, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3521] COND TRUE (unsigned int )dev->speed == 3U [L3522] urb->interval = 1 << (interval - 1) VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3529] urb->start_frame = -1 VAL [\old(buffer_length)=0, \old(interval)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(pipe)=0, \old(res_usb_mouse_probe_3)=0, buffer_length=0, complete_fn={-1:2}, complete_fn={-1:2}, context={4294967386:-38}, context={4294967386:-38}, dev={4294967339:0}, dev={4294967339:0}, interval=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, pipe=0, res_usb_mouse_probe_3=0, transfer_buffer={4294967386:66}, transfer_buffer={4294967386:66}, urb={4294967386:74}, urb={4294967386:74}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3924-L3925] RET usb_fill_int_urb(mouse->irq, dev, (unsigned int )pipe, (void *)mouse->data, tmp___14, & usb_mouse_irq, (void *)mouse, (int )endpoint->bInterval) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, endpoint->bInterval=0, error=-12, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, mouse->data={4294967386:66}, mouse->irq={4294967386:74}, pipe=0, res_usb_mouse_probe_3=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3926] EXPR mouse->irq [L3926] EXPR mouse->data_dma [L3926] (mouse->irq)->transfer_dma = mouse->data_dma [L3927] EXPR mouse->irq [L3927] EXPR mouse->irq [L3927] EXPR (mouse->irq)->transfer_flags [L3927] (mouse->irq)->transfer_flags = (mouse->irq)->transfer_flags | 4U [L3928] EXPR mouse->dev [L3928] tmp = (int )input_register_device(mouse->dev) [L3929] error = tmp VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3931] COND FALSE !(\read(error)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3937] CALL usb_set_intfdata(intf, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, data={4294967386:-38}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3937] RET usb_set_intfdata(intf, (void *)mouse) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3939] return (0); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, \result=0, dev={4294967339:0}, endpoint={4294967321:0}, error=0, id={4294967327:4294967392}, id={4294967327:4294967392}, input_dev={4294967339:-24}, interface={4294967330:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, maxp=0, mouse={4294967386:-38}, pipe=0, res_usb_mouse_probe_3=0, tmp=0, tmp___10=0, tmp___11={4294967386:-38}, tmp___12={4294967386:66}, tmp___13=0, tmp___14=0, tmp___7={4294967339:0}, tmp___8=1, tmp___9=40, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4111] RET, EXPR usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1)=0, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4111] res_usb_mouse_probe_3 = usb_mouse_probe(var_group1, var_usb_mouse_probe_3_p1) [L4114] COND FALSE !(\read(res_usb_mouse_probe_3)) [L4119] ldv_s_usb_mouse_driver_usb_driver = ldv_s_usb_mouse_driver_usb_driver + 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=0, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4098] tmp___8 = __VERIFIER_nondet_int() [L4100] COND FALSE !(tmp___8 == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4103] COND TRUE tmp___8 == 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4125] COND TRUE ldv_s_usb_mouse_driver_usb_driver == 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4127] CALL usb_mouse_disconnect(var_group1) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3957] struct usb_mouse *mouse ; [L3958] void *tmp___7 ; [L3959] struct usb_device *tmp___8 ; VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] CALL, EXPR usb_get_intfdata(intf) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3451] void *tmp___7 ; [L3455] tmp___7 = dev_get_drvdata((struct device const *)(& intf->dev)) [L3457] return (tmp___7); VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, \result={0:0}, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] RET, EXPR usb_get_intfdata(intf) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_get_intfdata(intf)={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3963] tmp___7 = usb_get_intfdata(intf) [L3964] mouse = (struct usb_mouse *)tmp___7 VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3965] CALL usb_set_intfdata(intf, (void *)0) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, data={0:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3965] RET usb_set_intfdata(intf, (void *)0) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L3967] COND FALSE !(\read(*mouse)) VAL [\old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=1, \old(res_usb_mouse_probe_3)=0, intf={4294967302:0}, intf={4294967302:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mouse={0:0}, res_usb_mouse_probe_3=0, tmp___7={0:0}, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4127] RET usb_mouse_disconnect(var_group1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4128] ldv_s_usb_mouse_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4084] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=1, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4087] tmp___9 = __VERIFIER_nondet_int() [L4089] COND FALSE !(\read(tmp___9)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4092] COND FALSE !(! (ldv_s_usb_mouse_driver_usb_driver == 0)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4146] CALL usb_mouse_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4146] RET usb_mouse_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_s_usb_mouse_driver_usb_driver=0, ldv_urb_state=1, res_usb_mouse_probe_3=0, tmp___7=0, tmp___8=1, tmp___9=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}, var_group1={4294967302:0}, var_usb_mouse_probe_3_p1={4294967327:4294967392}] [L4150] CALL ldv_check_final_state() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4308] COND FALSE !(ldv_urb_state == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4312] CALL ldv_blast_assert() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] [L4159] __VERIFIER_error() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_usb_mouse_probe_3)=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_usb_mouse_probe_3=0, usb_mouse_driver={4294967340:0}, usb_mouse_id_table={4294967373:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 30 procedures, 224 locations, 1 error locations. UNSAFE Result, 17.8s OverallTime, 21 OverallIterations, 3 TraceHistogramMax, 4.6s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 5350 SDtfs, 3113 SDslu, 11450 SDs, 0 SdLazy, 2494 SolverSat, 775 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 3.0s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 308 GetRequests, 218 SyntacticMatches, 6 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 42 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1216occurred in iteration=13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 20 MinimizatonAttempts, 691 StatesRemovedByMinimization, 14 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 1.1s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 2684 NumberOfCodeBlocks, 2684 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 2477 ConstructedInterpolants, 0 QuantifiedInterpolants, 567567 SizeOfPredicates, 1 NumberOfNonLiveVariables, 1153 ConjunctsInSsa, 3 ConjunctsInUnsatCore, 21 InterpolantComputations, 20 PerfectInterpolantSequences, 141/144 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-22 22:21:40,732 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-22 22:21:40,734 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-22 22:21:40,744 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-22 22:21:40,744 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-22 22:21:40,745 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-22 22:21:40,746 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-22 22:21:40,747 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-22 22:21:40,749 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-22 22:21:40,750 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-22 22:21:40,750 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-22 22:21:40,751 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-22 22:21:40,751 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-22 22:21:40,752 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-22 22:21:40,754 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-22 22:21:40,754 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-22 22:21:40,755 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-22 22:21:40,756 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-22 22:21:40,758 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-22 22:21:40,760 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-22 22:21:40,761 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-22 22:21:40,762 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-22 22:21:40,763 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-22 22:21:40,764 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-22 22:21:40,764 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-22 22:21:40,765 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-22 22:21:40,766 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-22 22:21:40,767 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-22 22:21:40,767 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-22 22:21:40,769 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-22 22:21:40,769 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-22 22:21:40,770 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-22 22:21:40,770 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-22 22:21:40,770 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-22 22:21:40,771 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-22 22:21:40,771 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-22 22:21:40,771 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2018-11-22 22:21:40,783 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-22 22:21:40,784 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-22 22:21:40,784 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-22 22:21:40,785 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-22 22:21:40,785 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-22 22:21:40,785 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-22 22:21:40,786 INFO L133 SettingsManager]: * Use SBE=true [2018-11-22 22:21:40,786 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-22 22:21:40,786 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-22 22:21:40,786 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-22 22:21:40,786 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-22 22:21:40,786 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-22 22:21:40,787 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-22 22:21:40,787 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-22 22:21:40,787 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-22 22:21:40,787 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-22 22:21:40,787 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-22 22:21:40,787 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-22 22:21:40,788 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-22 22:21:40,788 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-22 22:21:40,788 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-22 22:21:40,788 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-22 22:21:40,788 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-22 22:21:40,788 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-22 22:21:40,790 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-22 22:21:40,791 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-22 22:21:40,791 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-22 22:21:40,791 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-22 22:21:40,791 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-22 22:21:40,791 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-22 22:21:40,791 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1259db070705cc8318f4cd544a981db9ba453479 [2018-11-22 22:21:40,825 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-22 22:21:40,835 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-22 22:21:40,838 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-22 22:21:40,839 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-22 22:21:40,840 INFO L276 PluginConnector]: CDTParser initialized [2018-11-22 22:21:40,840 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-22 22:21:40,892 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data/aece88a5e/0a3cc1a099034d23b2d91560157292a8/FLAG2b0ff8f77 [2018-11-22 22:21:41,337 INFO L307 CDTParser]: Found 1 translation units. [2018-11-22 22:21:41,338 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-22 22:21:41,355 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data/aece88a5e/0a3cc1a099034d23b2d91560157292a8/FLAG2b0ff8f77 [2018-11-22 22:21:41,652 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/data/aece88a5e/0a3cc1a099034d23b2d91560157292a8 [2018-11-22 22:21:41,654 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-22 22:21:41,655 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-22 22:21:41,656 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-22 22:21:41,656 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-22 22:21:41,659 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-22 22:21:41,659 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:21:41" (1/1) ... [2018-11-22 22:21:41,662 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@317fa6ef and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:41, skipping insertion in model container [2018-11-22 22:21:41,662 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:21:41" (1/1) ... [2018-11-22 22:21:41,668 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-22 22:21:41,726 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-22 22:21:42,342 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:21:42,363 INFO L191 MainTranslator]: Completed pre-run [2018-11-22 22:21:42,468 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:21:42,498 INFO L195 MainTranslator]: Completed translation [2018-11-22 22:21:42,498 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42 WrapperNode [2018-11-22 22:21:42,499 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-22 22:21:42,499 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-22 22:21:42,499 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-22 22:21:42,499 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-22 22:21:42,504 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... [2018-11-22 22:21:42,523 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... [2018-11-22 22:21:42,530 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-22 22:21:42,530 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-22 22:21:42,530 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-22 22:21:42,530 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-22 22:21:42,536 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... [2018-11-22 22:21:42,536 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... [2018-11-22 22:21:42,544 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... [2018-11-22 22:21:42,544 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... [2018-11-22 22:21:42,576 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... [2018-11-22 22:21:42,582 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... [2018-11-22 22:21:42,588 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... [2018-11-22 22:21:42,594 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-22 22:21:42,594 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-22 22:21:42,594 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-22 22:21:42,595 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-22 22:21:42,595 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-22 22:21:42,631 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-22 22:21:42,631 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2018-11-22 22:21:42,631 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2018-11-22 22:21:42,631 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-22 22:21:42,631 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-22 22:21:42,631 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2018-11-22 22:21:42,631 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2018-11-22 22:21:42,632 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-22 22:21:42,632 INFO L130 BoogieDeclarations]: Found specification of procedure input_free_device [2018-11-22 22:21:42,632 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2018-11-22 22:21:42,632 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-22 22:21:42,632 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-22 22:21:42,632 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2018-11-22 22:21:42,632 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2018-11-22 22:21:42,632 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2018-11-22 22:21:42,633 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-22 22:21:42,633 INFO L130 BoogieDeclarations]: Found specification of procedure usb_deregister [2018-11-22 22:21:42,633 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2018-11-22 22:21:42,633 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2018-11-22 22:21:42,634 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_init [2018-11-22 22:21:42,634 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_init [2018-11-22 22:21:42,634 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-22 22:21:42,634 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_int [2018-11-22 22:21:42,634 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_int [2018-11-22 22:21:42,634 INFO L130 BoogieDeclarations]: Found specification of procedure strlcpy [2018-11-22 22:21:42,634 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register_driver [2018-11-22 22:21:42,634 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2018-11-22 22:21:42,634 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2018-11-22 22:21:42,634 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_probe [2018-11-22 22:21:42,634 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_probe [2018-11-22 22:21:42,634 INFO L130 BoogieDeclarations]: Found specification of procedure usb_make_path [2018-11-22 22:21:42,634 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_make_path [2018-11-22 22:21:42,635 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2018-11-22 22:21:42,635 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2018-11-22 22:21:42,635 INFO L130 BoogieDeclarations]: Found specification of procedure input_allocate_device [2018-11-22 22:21:42,635 INFO L138 BoogieDeclarations]: Found implementation of procedure input_allocate_device [2018-11-22 22:21:42,635 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register [2018-11-22 22:21:42,635 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_register [2018-11-22 22:21:42,635 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_exit [2018-11-22 22:21:42,635 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_exit [2018-11-22 22:21:42,635 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2018-11-22 22:21:42,635 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2018-11-22 22:21:42,636 INFO L130 BoogieDeclarations]: Found specification of procedure usb_mouse_disconnect [2018-11-22 22:21:42,636 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_mouse_disconnect [2018-11-22 22:21:42,636 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-22 22:21:42,636 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blast_assert [2018-11-22 22:21:42,636 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blast_assert [2018-11-22 22:21:42,636 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-22 22:21:42,636 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-22 22:21:42,636 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_int_urb [2018-11-22 22:21:42,636 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_int_urb [2018-11-22 22:21:42,636 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-22 22:21:42,636 INFO L130 BoogieDeclarations]: Found specification of procedure input_unregister_device [2018-11-22 22:21:42,636 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-22 22:21:42,639 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2018-11-22 22:21:42,639 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2018-11-22 22:21:42,639 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2018-11-22 22:21:42,640 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-22 22:21:42,640 INFO L130 BoogieDeclarations]: Found specification of procedure strlcat [2018-11-22 22:21:42,640 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2018-11-22 22:21:42,640 INFO L130 BoogieDeclarations]: Found specification of procedure usb_to_input_id [2018-11-22 22:21:42,640 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_to_input_id [2018-11-22 22:21:42,640 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2018-11-22 22:21:42,640 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2018-11-22 22:21:42,640 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_assume_stop [2018-11-22 22:21:42,641 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_assume_stop [2018-11-22 22:21:42,641 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2018-11-22 22:21:42,641 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2018-11-22 22:21:42,641 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2018-11-22 22:21:42,641 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2018-11-22 22:21:42,641 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_int_in [2018-11-22 22:21:42,641 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_int_in [2018-11-22 22:21:42,641 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value [2018-11-22 22:21:42,642 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2018-11-22 22:21:42,642 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2018-11-22 22:21:42,642 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undefined_pointer [2018-11-22 22:21:42,642 INFO L130 BoogieDeclarations]: Found specification of procedure input_set_drvdata [2018-11-22 22:21:42,642 INFO L138 BoogieDeclarations]: Found implementation of procedure input_set_drvdata [2018-11-22 22:21:42,642 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-22 22:21:42,643 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-22 22:21:42,644 INFO L130 BoogieDeclarations]: Found specification of procedure usb_maxpacket [2018-11-22 22:21:42,644 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_maxpacket [2018-11-22 22:21:42,644 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2018-11-22 22:21:42,644 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2018-11-22 22:21:42,644 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-22 22:21:42,644 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-22 22:21:42,644 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2018-11-22 22:21:42,644 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2018-11-22 22:21:42,644 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-22 22:21:42,645 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-22 22:21:42,645 INFO L130 BoogieDeclarations]: Found specification of procedure input_register_device [2018-11-22 22:21:42,848 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-22 22:21:42,848 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-22 22:21:48,358 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-22 22:21:48,358 INFO L280 CfgBuilder]: Removed 5 assue(true) statements. [2018-11-22 22:21:48,359 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:21:48 BoogieIcfgContainer [2018-11-22 22:21:48,359 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-22 22:21:48,360 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-22 22:21:48,360 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-22 22:21:48,362 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-22 22:21:48,363 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.11 10:21:41" (1/3) ... [2018-11-22 22:21:48,363 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ddc0d6d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 10:21:48, skipping insertion in model container [2018-11-22 22:21:48,363 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:21:42" (2/3) ... [2018-11-22 22:21:48,364 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ddc0d6d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 10:21:48, skipping insertion in model container [2018-11-22 22:21:48,364 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:21:48" (3/3) ... [2018-11-22 22:21:48,365 INFO L112 eAbstractionObserver]: Analyzing ICFG usb_urb-drivers-hid-usbhid-usbmouse.ko_false-unreach-call.cil.out.i.pp.i [2018-11-22 22:21:48,374 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-22 22:21:48,381 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-22 22:21:48,394 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-22 22:21:48,420 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-22 22:21:48,421 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-22 22:21:48,421 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-22 22:21:48,421 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-22 22:21:48,422 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-22 22:21:48,422 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-22 22:21:48,422 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-22 22:21:48,422 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-22 22:21:48,422 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-22 22:21:48,438 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states. [2018-11-22 22:21:48,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-22 22:21:48,444 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:48,444 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:48,446 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:48,450 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:48,450 INFO L82 PathProgramCache]: Analyzing trace with hash -736875403, now seen corresponding path program 1 times [2018-11-22 22:21:48,455 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:21:48,455 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:21:48,476 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:48,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:48,587 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:21:48,615 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:21:48,616 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-22 22:21:48,623 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:48,624 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:21:48,626 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:21:48,635 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:21:48,635 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:48,637 INFO L87 Difference]: Start difference. First operand 220 states. Second operand 3 states. [2018-11-22 22:21:48,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:48,732 INFO L93 Difference]: Finished difference Result 561 states and 738 transitions. [2018-11-22 22:21:48,733 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:21:48,734 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 23 [2018-11-22 22:21:48,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:48,746 INFO L225 Difference]: With dead ends: 561 [2018-11-22 22:21:48,747 INFO L226 Difference]: Without dead ends: 309 [2018-11-22 22:21:48,751 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:48,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 309 states. [2018-11-22 22:21:48,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 309 to 305. [2018-11-22 22:21:48,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 305 states. [2018-11-22 22:21:48,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 305 states to 305 states and 364 transitions. [2018-11-22 22:21:48,812 INFO L78 Accepts]: Start accepts. Automaton has 305 states and 364 transitions. Word has length 23 [2018-11-22 22:21:48,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:48,813 INFO L480 AbstractCegarLoop]: Abstraction has 305 states and 364 transitions. [2018-11-22 22:21:48,813 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:21:48,813 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 364 transitions. [2018-11-22 22:21:48,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2018-11-22 22:21:48,814 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:48,814 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:48,814 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:48,814 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:48,814 INFO L82 PathProgramCache]: Analyzing trace with hash -1368445644, now seen corresponding path program 1 times [2018-11-22 22:21:48,815 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:21:48,815 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:21:48,846 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:48,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:48,933 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:21:48,942 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:21:48,943 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [MP cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (3)] Exception during sending of exit command (exit): Broken pipe [2018-11-22 22:21:48,946 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:48,946 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:21:48,947 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:21:48,948 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:21:48,948 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:48,948 INFO L87 Difference]: Start difference. First operand 305 states and 364 transitions. Second operand 3 states. [2018-11-22 22:21:49,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:49,011 INFO L93 Difference]: Finished difference Result 874 states and 1061 transitions. [2018-11-22 22:21:49,017 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:21:49,017 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2018-11-22 22:21:49,017 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:49,022 INFO L225 Difference]: With dead ends: 874 [2018-11-22 22:21:49,022 INFO L226 Difference]: Without dead ends: 581 [2018-11-22 22:21:49,024 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:49,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 581 states. [2018-11-22 22:21:49,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 581 to 574. [2018-11-22 22:21:49,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-11-22 22:21:49,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 690 transitions. [2018-11-22 22:21:49,074 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 690 transitions. Word has length 24 [2018-11-22 22:21:49,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:49,074 INFO L480 AbstractCegarLoop]: Abstraction has 574 states and 690 transitions. [2018-11-22 22:21:49,074 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:21:49,074 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 690 transitions. [2018-11-22 22:21:49,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-22 22:21:49,076 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:49,076 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:49,076 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:49,076 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:49,077 INFO L82 PathProgramCache]: Analyzing trace with hash 1883917988, now seen corresponding path program 1 times [2018-11-22 22:21:49,077 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:21:49,077 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:21:49,103 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:49,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:49,248 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:21:49,267 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:21:49,267 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-22 22:21:49,269 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:49,269 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:21:49,269 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:21:49,269 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:21:49,270 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:49,270 INFO L87 Difference]: Start difference. First operand 574 states and 690 transitions. Second operand 3 states. [2018-11-22 22:21:49,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:49,311 INFO L93 Difference]: Finished difference Result 1165 states and 1419 transitions. [2018-11-22 22:21:49,312 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:21:49,312 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 46 [2018-11-22 22:21:49,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:49,315 INFO L225 Difference]: With dead ends: 1165 [2018-11-22 22:21:49,315 INFO L226 Difference]: Without dead ends: 609 [2018-11-22 22:21:49,317 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:21:49,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 609 states. [2018-11-22 22:21:49,343 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 609 to 609. [2018-11-22 22:21:49,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 609 states. [2018-11-22 22:21:49,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 609 states to 609 states and 736 transitions. [2018-11-22 22:21:49,346 INFO L78 Accepts]: Start accepts. Automaton has 609 states and 736 transitions. Word has length 46 [2018-11-22 22:21:49,346 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:49,347 INFO L480 AbstractCegarLoop]: Abstraction has 609 states and 736 transitions. [2018-11-22 22:21:49,347 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:21:49,347 INFO L276 IsEmpty]: Start isEmpty. Operand 609 states and 736 transitions. [2018-11-22 22:21:49,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-22 22:21:49,348 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:49,348 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:49,349 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:49,349 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:49,349 INFO L82 PathProgramCache]: Analyzing trace with hash 1208995629, now seen corresponding path program 1 times [2018-11-22 22:21:49,350 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:21:49,350 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:21:49,398 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:49,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:49,495 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:21:49,529 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:21:49,529 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-22 22:21:49,531 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:49,531 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:49,531 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:49,531 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:49,531 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:49,532 INFO L87 Difference]: Start difference. First operand 609 states and 736 transitions. Second operand 5 states. [2018-11-22 22:21:51,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:51,607 INFO L93 Difference]: Finished difference Result 1238 states and 1494 transitions. [2018-11-22 22:21:51,608 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:51,608 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 64 [2018-11-22 22:21:51,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:51,611 INFO L225 Difference]: With dead ends: 1238 [2018-11-22 22:21:51,611 INFO L226 Difference]: Without dead ends: 644 [2018-11-22 22:21:51,612 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:51,613 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 644 states. [2018-11-22 22:21:51,638 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 644 to 621. [2018-11-22 22:21:51,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 621 states. [2018-11-22 22:21:51,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 621 states to 621 states and 746 transitions. [2018-11-22 22:21:51,641 INFO L78 Accepts]: Start accepts. Automaton has 621 states and 746 transitions. Word has length 64 [2018-11-22 22:21:51,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:51,641 INFO L480 AbstractCegarLoop]: Abstraction has 621 states and 746 transitions. [2018-11-22 22:21:51,641 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:51,641 INFO L276 IsEmpty]: Start isEmpty. Operand 621 states and 746 transitions. [2018-11-22 22:21:51,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2018-11-22 22:21:51,643 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:51,643 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:51,644 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:51,644 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:51,644 INFO L82 PathProgramCache]: Analyzing trace with hash -335293934, now seen corresponding path program 1 times [2018-11-22 22:21:51,646 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:21:51,646 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:21:51,669 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:51,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:51,798 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:21:51,833 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:51,833 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-22 22:21:51,835 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:51,835 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:21:51,836 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:21:51,836 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:21:51,836 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:21:51,836 INFO L87 Difference]: Start difference. First operand 621 states and 746 transitions. Second operand 6 states. [2018-11-22 22:21:51,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:51,890 INFO L93 Difference]: Finished difference Result 1249 states and 1510 transitions. [2018-11-22 22:21:51,890 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-22 22:21:51,890 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 110 [2018-11-22 22:21:51,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:51,893 INFO L225 Difference]: With dead ends: 1249 [2018-11-22 22:21:51,893 INFO L226 Difference]: Without dead ends: 642 [2018-11-22 22:21:51,894 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 105 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-22 22:21:51,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 642 states. [2018-11-22 22:21:51,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 642 to 636. [2018-11-22 22:21:51,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 636 states. [2018-11-22 22:21:51,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 636 states to 636 states and 759 transitions. [2018-11-22 22:21:51,910 INFO L78 Accepts]: Start accepts. Automaton has 636 states and 759 transitions. Word has length 110 [2018-11-22 22:21:51,911 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:51,911 INFO L480 AbstractCegarLoop]: Abstraction has 636 states and 759 transitions. [2018-11-22 22:21:51,911 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:21:51,911 INFO L276 IsEmpty]: Start isEmpty. Operand 636 states and 759 transitions. [2018-11-22 22:21:51,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2018-11-22 22:21:51,913 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:51,913 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:51,913 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:51,914 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:51,914 INFO L82 PathProgramCache]: Analyzing trace with hash -589922631, now seen corresponding path program 1 times [2018-11-22 22:21:51,914 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:21:51,914 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:21:51,930 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:52,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:52,323 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:21:52,409 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:52,409 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [MP cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (7)] Exception during sending of exit command (exit): Broken pipe [2018-11-22 22:21:52,413 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:52,413 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:52,413 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:52,413 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:52,414 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:52,414 INFO L87 Difference]: Start difference. First operand 636 states and 759 transitions. Second operand 5 states. [2018-11-22 22:21:52,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:52,475 INFO L93 Difference]: Finished difference Result 966 states and 1158 transitions. [2018-11-22 22:21:52,477 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:52,477 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 116 [2018-11-22 22:21:52,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:52,480 INFO L225 Difference]: With dead ends: 966 [2018-11-22 22:21:52,480 INFO L226 Difference]: Without dead ends: 644 [2018-11-22 22:21:52,481 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:52,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 644 states. [2018-11-22 22:21:52,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 644 to 644. [2018-11-22 22:21:52,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 644 states. [2018-11-22 22:21:52,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 644 states to 644 states and 767 transitions. [2018-11-22 22:21:52,506 INFO L78 Accepts]: Start accepts. Automaton has 644 states and 767 transitions. Word has length 116 [2018-11-22 22:21:52,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:52,506 INFO L480 AbstractCegarLoop]: Abstraction has 644 states and 767 transitions. [2018-11-22 22:21:52,506 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:52,506 INFO L276 IsEmpty]: Start isEmpty. Operand 644 states and 767 transitions. [2018-11-22 22:21:52,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2018-11-22 22:21:52,508 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:52,508 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:52,508 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:52,508 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:52,508 INFO L82 PathProgramCache]: Analyzing trace with hash -995031749, now seen corresponding path program 1 times [2018-11-22 22:21:52,509 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:21:52,509 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:21:52,532 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:52,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:53,006 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:21:53,059 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:53,059 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-22 22:21:53,063 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:53,063 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:21:53,064 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:21:53,064 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:21:53,064 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:53,064 INFO L87 Difference]: Start difference. First operand 644 states and 767 transitions. Second operand 5 states. [2018-11-22 22:21:53,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:21:53,129 INFO L93 Difference]: Finished difference Result 1101 states and 1315 transitions. [2018-11-22 22:21:53,129 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:21:53,129 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 120 [2018-11-22 22:21:53,130 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:21:53,131 INFO L225 Difference]: With dead ends: 1101 [2018-11-22 22:21:53,132 INFO L226 Difference]: Without dead ends: 476 [2018-11-22 22:21:53,133 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:21:53,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 476 states. [2018-11-22 22:21:53,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 476 to 476. [2018-11-22 22:21:53,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 476 states. [2018-11-22 22:21:53,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 476 states to 476 states and 560 transitions. [2018-11-22 22:21:53,150 INFO L78 Accepts]: Start accepts. Automaton has 476 states and 560 transitions. Word has length 120 [2018-11-22 22:21:53,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:21:53,150 INFO L480 AbstractCegarLoop]: Abstraction has 476 states and 560 transitions. [2018-11-22 22:21:53,150 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:21:53,150 INFO L276 IsEmpty]: Start isEmpty. Operand 476 states and 560 transitions. [2018-11-22 22:21:53,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2018-11-22 22:21:53,152 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:21:53,152 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:21:53,152 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:21:53,152 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:21:53,152 INFO L82 PathProgramCache]: Analyzing trace with hash 249732732, now seen corresponding path program 1 times [2018-11-22 22:21:53,153 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:21:53,153 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:21:53,176 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:21:53,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:21:53,768 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:21:53,884 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:21:53,885 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-22 22:21:53,887 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:21:53,888 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:21:53,888 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:21:53,888 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:21:53,888 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:21:53,888 INFO L87 Difference]: Start difference. First operand 476 states and 560 transitions. Second operand 6 states. [2018-11-22 22:22:01,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:22:01,027 INFO L93 Difference]: Finished difference Result 1472 states and 1753 transitions. [2018-11-22 22:22:01,028 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-22 22:22:01,028 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 120 [2018-11-22 22:22:01,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:22:01,034 INFO L225 Difference]: With dead ends: 1472 [2018-11-22 22:22:01,034 INFO L226 Difference]: Without dead ends: 1125 [2018-11-22 22:22:01,035 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2018-11-22 22:22:01,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1125 states. [2018-11-22 22:22:01,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1125 to 948. [2018-11-22 22:22:01,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 948 states. [2018-11-22 22:22:01,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 948 states to 948 states and 1123 transitions. [2018-11-22 22:22:01,076 INFO L78 Accepts]: Start accepts. Automaton has 948 states and 1123 transitions. Word has length 120 [2018-11-22 22:22:01,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:22:01,076 INFO L480 AbstractCegarLoop]: Abstraction has 948 states and 1123 transitions. [2018-11-22 22:22:01,076 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:22:01,076 INFO L276 IsEmpty]: Start isEmpty. Operand 948 states and 1123 transitions. [2018-11-22 22:22:01,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2018-11-22 22:22:01,078 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:22:01,078 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:01,078 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:22:01,078 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:01,079 INFO L82 PathProgramCache]: Analyzing trace with hash 1326644216, now seen corresponding path program 1 times [2018-11-22 22:22:01,079 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:22:01,079 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:22:01,101 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:01,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:01,274 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:22:01,335 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:22:01,336 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-22 22:22:01,338 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:01,338 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:22:01,338 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:22:01,338 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:22:01,339 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:22:01,339 INFO L87 Difference]: Start difference. First operand 948 states and 1123 transitions. Second operand 6 states. [2018-11-22 22:22:03,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:22:03,409 INFO L93 Difference]: Finished difference Result 1115 states and 1306 transitions. [2018-11-22 22:22:03,410 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-22 22:22:03,410 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 124 [2018-11-22 22:22:03,410 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:22:03,411 INFO L225 Difference]: With dead ends: 1115 [2018-11-22 22:22:03,411 INFO L226 Difference]: Without dead ends: 172 [2018-11-22 22:22:03,413 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-22 22:22:03,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2018-11-22 22:22:03,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 172. [2018-11-22 22:22:03,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-22 22:22:03,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 182 transitions. [2018-11-22 22:22:03,422 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 182 transitions. Word has length 124 [2018-11-22 22:22:03,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:22:03,422 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 182 transitions. [2018-11-22 22:22:03,422 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:22:03,422 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 182 transitions. [2018-11-22 22:22:03,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-22 22:22:03,423 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:22:03,424 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:03,424 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:22:03,424 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:03,424 INFO L82 PathProgramCache]: Analyzing trace with hash 2132993389, now seen corresponding path program 1 times [2018-11-22 22:22:03,425 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:22:03,425 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:22:03,453 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:03,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:03,886 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:22:03,919 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:22:03,920 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-22 22:22:03,922 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:03,922 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:22:03,923 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:22:03,923 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:22:03,923 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:22:03,923 INFO L87 Difference]: Start difference. First operand 172 states and 182 transitions. Second operand 3 states. [2018-11-22 22:22:03,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:22:03,931 INFO L93 Difference]: Finished difference Result 175 states and 184 transitions. [2018-11-22 22:22:03,932 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:22:03,932 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 133 [2018-11-22 22:22:03,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:22:03,933 INFO L225 Difference]: With dead ends: 175 [2018-11-22 22:22:03,933 INFO L226 Difference]: Without dead ends: 132 [2018-11-22 22:22:03,933 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:22:03,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2018-11-22 22:22:03,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 132. [2018-11-22 22:22:03,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 132 states. [2018-11-22 22:22:03,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 132 states to 132 states and 139 transitions. [2018-11-22 22:22:03,938 INFO L78 Accepts]: Start accepts. Automaton has 132 states and 139 transitions. Word has length 133 [2018-11-22 22:22:03,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:22:03,938 INFO L480 AbstractCegarLoop]: Abstraction has 132 states and 139 transitions. [2018-11-22 22:22:03,938 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:22:03,938 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 139 transitions. [2018-11-22 22:22:03,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2018-11-22 22:22:03,939 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:22:03,939 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:22:03,940 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:22:03,940 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:22:03,940 INFO L82 PathProgramCache]: Analyzing trace with hash 1289599528, now seen corresponding path program 1 times [2018-11-22 22:22:03,940 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-22 22:22:03,940 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/cvc4nyu Starting monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-22 22:22:03,966 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:22:04,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:22:04,399 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 22:22:04,435 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-22 22:22:04,435 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-22 22:22:04,438 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:22:04,438 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:22:04,438 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:22:04,439 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:22:04,439 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:22:04,439 INFO L87 Difference]: Start difference. First operand 132 states and 139 transitions. Second operand 5 states. [2018-11-22 22:22:04,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:22:04,455 INFO L93 Difference]: Finished difference Result 132 states and 139 transitions. [2018-11-22 22:22:04,456 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:22:04,456 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 135 [2018-11-22 22:22:04,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:22:04,457 INFO L225 Difference]: With dead ends: 132 [2018-11-22 22:22:04,457 INFO L226 Difference]: Without dead ends: 0 [2018-11-22 22:22:04,457 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:22:04,457 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2018-11-22 22:22:04,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2018-11-22 22:22:04,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2018-11-22 22:22:04,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2018-11-22 22:22:04,458 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 135 [2018-11-22 22:22:04,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:22:04,458 INFO L480 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 22:22:04,458 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:22:04,458 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2018-11-22 22:22:04,458 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-22 22:22:04,462 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2018-11-22 22:22:05,244 INFO L448 ceAbstractionStarter]: For program point L3521(lines 3521 3528) no Hoare annotation was computed. [2018-11-22 22:22:05,244 INFO L448 ceAbstractionStarter]: For program point usb_fill_int_urbFINAL(lines 3508 3532) no Hoare annotation was computed. [2018-11-22 22:22:05,244 INFO L448 ceAbstractionStarter]: For program point usb_fill_int_urbEXIT(lines 3508 3532) no Hoare annotation was computed. [2018-11-22 22:22:05,244 INFO L448 ceAbstractionStarter]: For program point L3524(lines 3524 3528) no Hoare annotation was computed. [2018-11-22 22:22:05,244 INFO L451 ceAbstractionStarter]: At program point usb_fill_int_urbENTRY(lines 3508 3532) the Hoare annotation is: true [2018-11-22 22:22:05,244 INFO L448 ceAbstractionStarter]: For program point L3524-2(lines 3521 3528) no Hoare annotation was computed. [2018-11-22 22:22:05,244 INFO L448 ceAbstractionStarter]: For program point L4127-1(line 4127) no Hoare annotation was computed. [2018-11-22 22:22:05,245 INFO L444 ceAbstractionStarter]: At program point L4127(line 4127) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,245 INFO L448 ceAbstractionStarter]: For program point mainEXIT(lines 4063 4154) no Hoare annotation was computed. [2018-11-22 22:22:05,245 INFO L448 ceAbstractionStarter]: For program point L4111-1(line 4111) no Hoare annotation was computed. [2018-11-22 22:22:05,245 INFO L444 ceAbstractionStarter]: At program point L4111(line 4111) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= main_~ldv_s_usb_mouse_driver_usb_driver~0 (_ bv0 32)))) [2018-11-22 22:22:05,245 INFO L448 ceAbstractionStarter]: For program point L4103(lines 4103 4139) no Hoare annotation was computed. [2018-11-22 22:22:05,245 INFO L444 ceAbstractionStarter]: At program point L4141(lines 4083 4142) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (_ bv0 32) ~ldv_coherent_state~0)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,245 INFO L448 ceAbstractionStarter]: For program point L4075-1(line 4075) no Hoare annotation was computed. [2018-11-22 22:22:05,245 INFO L444 ceAbstractionStarter]: At program point L4075(line 4075) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0))) [2018-11-22 22:22:05,246 INFO L444 ceAbstractionStarter]: At program point L4104(lines 4103 4139) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= main_~ldv_s_usb_mouse_driver_usb_driver~0 (_ bv0 32)))) [2018-11-22 22:22:05,246 INFO L444 ceAbstractionStarter]: At program point L4137(lines 4084 4140) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= main_~ldv_s_usb_mouse_driver_usb_driver~0 (_ bv0 32)))) [2018-11-22 22:22:05,246 INFO L448 ceAbstractionStarter]: For program point L4100(lines 4100 4139) no Hoare annotation was computed. [2018-11-22 22:22:05,246 INFO L448 ceAbstractionStarter]: For program point L4092(lines 4092 4096) no Hoare annotation was computed. [2018-11-22 22:22:05,246 INFO L448 ceAbstractionStarter]: For program point L4092-1(lines 4089 4096) no Hoare annotation was computed. [2018-11-22 22:22:05,246 INFO L448 ceAbstractionStarter]: For program point L4150(line 4150) no Hoare annotation was computed. [2018-11-22 22:22:05,246 INFO L444 ceAbstractionStarter]: At program point L4146(lines 4071 4153) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (_ bv0 32) ~ldv_coherent_state~0)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,246 INFO L448 ceAbstractionStarter]: For program point $Ultimate##18(lines 4107 4138) no Hoare annotation was computed. [2018-11-22 22:22:05,246 INFO L448 ceAbstractionStarter]: For program point mainFINAL(lines 4063 4154) no Hoare annotation was computed. [2018-11-22 22:22:05,246 INFO L448 ceAbstractionStarter]: For program point $Ultimate##19(lines 4107 4138) no Hoare annotation was computed. [2018-11-22 22:22:05,247 INFO L444 ceAbstractionStarter]: At program point L4101(lines 4100 4139) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= main_~ldv_s_usb_mouse_driver_usb_driver~0 (_ bv0 32)))) [2018-11-22 22:22:05,247 INFO L444 ceAbstractionStarter]: At program point mainENTRY(lines 4063 4154) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0))) [2018-11-22 22:22:05,247 INFO L448 ceAbstractionStarter]: For program point L4089(lines 4089 4096) no Hoare annotation was computed. [2018-11-22 22:22:05,247 INFO L448 ceAbstractionStarter]: For program point L4085(line 4085) no Hoare annotation was computed. [2018-11-22 22:22:05,247 INFO L448 ceAbstractionStarter]: For program point L4114(lines 4114 4118) no Hoare annotation was computed. [2018-11-22 22:22:05,247 INFO L448 ceAbstractionStarter]: For program point L4077(lines 4077 4081) no Hoare annotation was computed. [2018-11-22 22:22:05,247 INFO L448 ceAbstractionStarter]: For program point usb_get_intfdataEXIT(lines 3450 3459) no Hoare annotation was computed. [2018-11-22 22:22:05,247 INFO L451 ceAbstractionStarter]: At program point usb_get_intfdataENTRY(lines 3450 3459) the Hoare annotation is: true [2018-11-22 22:22:05,247 INFO L448 ceAbstractionStarter]: For program point usb_get_intfdataFINAL(lines 3450 3459) no Hoare annotation was computed. [2018-11-22 22:22:05,247 INFO L451 ceAbstractionStarter]: At program point usb_to_input_idENTRY(lines 3659 3669) the Hoare annotation is: true [2018-11-22 22:22:05,248 INFO L448 ceAbstractionStarter]: For program point usb_to_input_idFINAL(lines 3659 3669) no Hoare annotation was computed. [2018-11-22 22:22:05,248 INFO L448 ceAbstractionStarter]: For program point usb_to_input_idEXIT(lines 3659 3669) no Hoare annotation was computed. [2018-11-22 22:22:05,248 INFO L451 ceAbstractionStarter]: At program point L3400(line 3400) the Hoare annotation is: true [2018-11-22 22:22:05,248 INFO L448 ceAbstractionStarter]: For program point kzallocEXIT(lines 3395 3404) no Hoare annotation was computed. [2018-11-22 22:22:05,248 INFO L448 ceAbstractionStarter]: For program point L3400-1(line 3400) no Hoare annotation was computed. [2018-11-22 22:22:05,248 INFO L451 ceAbstractionStarter]: At program point kzallocENTRY(lines 3395 3404) the Hoare annotation is: true [2018-11-22 22:22:05,248 INFO L448 ceAbstractionStarter]: For program point kzallocFINAL(lines 3395 3404) no Hoare annotation was computed. [2018-11-22 22:22:05,248 INFO L448 ceAbstractionStarter]: For program point ldv_assume_stopFINAL(lines 4165 4172) no Hoare annotation was computed. [2018-11-22 22:22:05,248 INFO L451 ceAbstractionStarter]: At program point ldv_assume_stopENTRY(lines 4165 4172) the Hoare annotation is: true [2018-11-22 22:22:05,248 INFO L448 ceAbstractionStarter]: For program point ldv_assume_stopEXIT(lines 4165 4172) no Hoare annotation was computed. [2018-11-22 22:22:05,248 INFO L451 ceAbstractionStarter]: At program point kmallocENTRY(lines 3384 3394) the Hoare annotation is: true [2018-11-22 22:22:05,248 INFO L448 ceAbstractionStarter]: For program point kmallocFINAL(lines 3384 3394) no Hoare annotation was computed. [2018-11-22 22:22:05,249 INFO L448 ceAbstractionStarter]: For program point kmallocEXIT(lines 3384 3394) no Hoare annotation was computed. [2018-11-22 22:22:05,249 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_dir_inEXIT(lines 3408 3414) no Hoare annotation was computed. [2018-11-22 22:22:05,249 INFO L451 ceAbstractionStarter]: At program point usb_endpoint_dir_inENTRY(lines 3408 3414) the Hoare annotation is: true [2018-11-22 22:22:05,249 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_dir_inFINAL(lines 3408 3414) no Hoare annotation was computed. [2018-11-22 22:22:05,249 INFO L448 ceAbstractionStarter]: For program point L4212(lines 4211 4233) no Hoare annotation was computed. [2018-11-22 22:22:05,249 INFO L444 ceAbstractionStarter]: At program point usb_free_coherentENTRY(lines 4206 4239) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_urb_state~0)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (not (= (_ bv1 32) |old(~ldv_coherent_state~0)|))) [2018-11-22 22:22:05,249 INFO L448 ceAbstractionStarter]: For program point usb_free_coherentEXIT(lines 4206 4239) no Hoare annotation was computed. [2018-11-22 22:22:05,249 INFO L444 ceAbstractionStarter]: At program point L4225(line 4225) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_urb_state~0)) (not (= (_ bv1 32) |old(~ldv_coherent_state~0)|))) [2018-11-22 22:22:05,249 INFO L448 ceAbstractionStarter]: For program point L4225-1(lines 4221 4227) no Hoare annotation was computed. [2018-11-22 22:22:05,250 INFO L448 ceAbstractionStarter]: For program point L4221(lines 4221 4227) no Hoare annotation was computed. [2018-11-22 22:22:05,250 INFO L451 ceAbstractionStarter]: At program point L4215(line 4215) the Hoare annotation is: true [2018-11-22 22:22:05,250 INFO L444 ceAbstractionStarter]: At program point L4211loopEntry(lines 4211 4233) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_urb_state~0)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (not (= (_ bv1 32) |old(~ldv_coherent_state~0)|))) [2018-11-22 22:22:05,250 INFO L448 ceAbstractionStarter]: For program point L4213(lines 4211 4233) no Hoare annotation was computed. [2018-11-22 22:22:05,250 INFO L444 ceAbstractionStarter]: At program point L4234(lines 4206 4239) the Hoare annotation is: (or (= (_ bv0 32) ~ldv_coherent_state~0) (not (= (_ bv0 32) ~ldv_urb_state~0)) (not (= (_ bv1 32) |old(~ldv_coherent_state~0)|))) [2018-11-22 22:22:05,250 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_is_int_inFINAL(lines 3422 3445) no Hoare annotation was computed. [2018-11-22 22:22:05,250 INFO L448 ceAbstractionStarter]: For program point L3435(lines 3435 3439) no Hoare annotation was computed. [2018-11-22 22:22:05,250 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_is_int_inEXIT(lines 3422 3445) no Hoare annotation was computed. [2018-11-22 22:22:05,250 INFO L448 ceAbstractionStarter]: For program point L3433-1(line 3433) no Hoare annotation was computed. [2018-11-22 22:22:05,251 INFO L451 ceAbstractionStarter]: At program point L3433(line 3433) the Hoare annotation is: true [2018-11-22 22:22:05,251 INFO L448 ceAbstractionStarter]: For program point L3431-1(lines 3431 3442) no Hoare annotation was computed. [2018-11-22 22:22:05,251 INFO L451 ceAbstractionStarter]: At program point usb_endpoint_is_int_inENTRY(lines 3422 3445) the Hoare annotation is: true [2018-11-22 22:22:05,251 INFO L448 ceAbstractionStarter]: For program point L3431(lines 3431 3442) no Hoare annotation was computed. [2018-11-22 22:22:05,251 INFO L448 ceAbstractionStarter]: For program point L3429-1(line 3429) no Hoare annotation was computed. [2018-11-22 22:22:05,251 INFO L451 ceAbstractionStarter]: At program point L3429(line 3429) the Hoare annotation is: true [2018-11-22 22:22:05,251 INFO L448 ceAbstractionStarter]: For program point usb_alloc_coherentFINAL(lines 4177 4204) no Hoare annotation was computed. [2018-11-22 22:22:05,251 INFO L448 ceAbstractionStarter]: For program point L4190(lines 4190 4194) no Hoare annotation was computed. [2018-11-22 22:22:05,251 INFO L444 ceAbstractionStarter]: At program point L4184loopEntry(lines 4184 4198) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) ~ldv_urb_state~0)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0)) [2018-11-22 22:22:05,251 INFO L444 ceAbstractionStarter]: At program point usb_alloc_coherentENTRY(lines 4177 4204) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) ~ldv_urb_state~0)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0)) [2018-11-22 22:22:05,252 INFO L448 ceAbstractionStarter]: For program point L4185(line 4185) no Hoare annotation was computed. [2018-11-22 22:22:05,252 INFO L448 ceAbstractionStarter]: For program point usb_alloc_coherentEXIT(lines 4177 4204) no Hoare annotation was computed. [2018-11-22 22:22:05,252 INFO L448 ceAbstractionStarter]: For program point L4199(lines 4183 4200) no Hoare annotation was computed. [2018-11-22 22:22:05,252 INFO L448 ceAbstractionStarter]: For program point L4015(lines 4015 4021) no Hoare annotation was computed. [2018-11-22 22:22:05,252 INFO L451 ceAbstractionStarter]: At program point L4012(line 4012) the Hoare annotation is: true [2018-11-22 22:22:05,252 INFO L448 ceAbstractionStarter]: For program point L4015-2(lines 4015 4021) no Hoare annotation was computed. [2018-11-22 22:22:05,252 INFO L448 ceAbstractionStarter]: For program point L4012-1(line 4012) no Hoare annotation was computed. [2018-11-22 22:22:05,252 INFO L448 ceAbstractionStarter]: For program point usb_mouse_initEXIT(lines 4006 4024) no Hoare annotation was computed. [2018-11-22 22:22:05,252 INFO L451 ceAbstractionStarter]: At program point usb_mouse_initENTRY(lines 4006 4024) the Hoare annotation is: true [2018-11-22 22:22:05,252 INFO L448 ceAbstractionStarter]: For program point usb_mouse_initFINAL(lines 4006 4024) no Hoare annotation was computed. [2018-11-22 22:22:05,253 INFO L451 ceAbstractionStarter]: At program point usb_endpoint_xfer_intENTRY(lines 3415 3421) the Hoare annotation is: true [2018-11-22 22:22:05,253 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_xfer_intFINAL(lines 3415 3421) no Hoare annotation was computed. [2018-11-22 22:22:05,253 INFO L448 ceAbstractionStarter]: For program point usb_endpoint_xfer_intEXIT(lines 3415 3421) no Hoare annotation was computed. [2018-11-22 22:22:05,253 INFO L451 ceAbstractionStarter]: At program point usb_set_intfdataENTRY(lines 3462 3471) the Hoare annotation is: true [2018-11-22 22:22:05,253 INFO L448 ceAbstractionStarter]: For program point usb_set_intfdataFINAL(lines 3462 3471) no Hoare annotation was computed. [2018-11-22 22:22:05,253 INFO L448 ceAbstractionStarter]: For program point usb_set_intfdataEXIT(lines 3462 3471) no Hoare annotation was computed. [2018-11-22 22:22:05,253 INFO L451 ceAbstractionStarter]: At program point input_set_drvdataENTRY(lines 3613 3622) the Hoare annotation is: true [2018-11-22 22:22:05,253 INFO L448 ceAbstractionStarter]: For program point input_set_drvdataFINAL(lines 3613 3622) no Hoare annotation was computed. [2018-11-22 22:22:05,253 INFO L448 ceAbstractionStarter]: For program point input_set_drvdataEXIT(lines 3613 3622) no Hoare annotation was computed. [2018-11-22 22:22:05,253 INFO L448 ceAbstractionStarter]: For program point L4288-1(lines 4284 4290) no Hoare annotation was computed. [2018-11-22 22:22:05,253 INFO L451 ceAbstractionStarter]: At program point L4288(line 4288) the Hoare annotation is: true [2018-11-22 22:22:05,254 INFO L448 ceAbstractionStarter]: For program point L4284(lines 4284 4290) no Hoare annotation was computed. [2018-11-22 22:22:05,254 INFO L451 ceAbstractionStarter]: At program point L4278(line 4278) the Hoare annotation is: true [2018-11-22 22:22:05,254 INFO L451 ceAbstractionStarter]: At program point L4274loopEntry(lines 4274 4296) the Hoare annotation is: true [2018-11-22 22:22:05,254 INFO L448 ceAbstractionStarter]: For program point L4276(lines 4274 4296) no Hoare annotation was computed. [2018-11-22 22:22:05,254 INFO L451 ceAbstractionStarter]: At program point L4297(lines 4269 4302) the Hoare annotation is: true [2018-11-22 22:22:05,254 INFO L448 ceAbstractionStarter]: For program point usb_free_urbEXIT(lines 4269 4302) no Hoare annotation was computed. [2018-11-22 22:22:05,254 INFO L451 ceAbstractionStarter]: At program point usb_free_urbENTRY(lines 4269 4302) the Hoare annotation is: true [2018-11-22 22:22:05,254 INFO L448 ceAbstractionStarter]: For program point L4275(lines 4274 4296) no Hoare annotation was computed. [2018-11-22 22:22:05,254 INFO L448 ceAbstractionStarter]: For program point L3937-1(line 3937) no Hoare annotation was computed. [2018-11-22 22:22:05,254 INFO L444 ceAbstractionStarter]: At program point L3937(line 3937) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,254 INFO L448 ceAbstractionStarter]: For program point L3863(lines 3863 3867) no Hoare annotation was computed. [2018-11-22 22:22:05,254 INFO L448 ceAbstractionStarter]: For program point L3855(lines 3855 3859) no Hoare annotation was computed. [2018-11-22 22:22:05,255 INFO L444 ceAbstractionStarter]: At program point L3946(line 3946) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (bvadd |old(~ldv_coherent_state~0)| (_ bv1 32)) ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,255 INFO L448 ceAbstractionStarter]: For program point L3946-1(line 3946) no Hoare annotation was computed. [2018-11-22 22:22:05,255 INFO L444 ceAbstractionStarter]: At program point L3942(line 3942) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,255 INFO L448 ceAbstractionStarter]: For program point L3942-1(line 3942) no Hoare annotation was computed. [2018-11-22 22:22:05,255 INFO L448 ceAbstractionStarter]: For program point L3843(lines 3843 3850) no Hoare annotation was computed. [2018-11-22 22:22:05,255 INFO L448 ceAbstractionStarter]: For program point L3839-1(line 3839) no Hoare annotation was computed. [2018-11-22 22:22:05,255 INFO L444 ceAbstractionStarter]: At program point L3839(line 3839) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,255 INFO L448 ceAbstractionStarter]: For program point usb_mouse_probeFINAL(lines 3794 3955) no Hoare annotation was computed. [2018-11-22 22:22:05,255 INFO L448 ceAbstractionStarter]: For program point L3835-1(line 3835) no Hoare annotation was computed. [2018-11-22 22:22:05,255 INFO L444 ceAbstractionStarter]: At program point L3835(line 3835) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,256 INFO L448 ceAbstractionStarter]: For program point L3827-1(line 3827) no Hoare annotation was computed. [2018-11-22 22:22:05,256 INFO L444 ceAbstractionStarter]: At program point L3827(line 3827) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,256 INFO L448 ceAbstractionStarter]: For program point L3918(lines 3918 3922) no Hoare annotation was computed. [2018-11-22 22:22:05,256 INFO L444 ceAbstractionStarter]: At program point L3852(line 3852) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,256 INFO L448 ceAbstractionStarter]: For program point L3918-2(lines 3918 3922) no Hoare annotation was computed. [2018-11-22 22:22:05,256 INFO L444 ceAbstractionStarter]: At program point usb_mouse_probeENTRY(lines 3794 3955) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0))) [2018-11-22 22:22:05,256 INFO L444 ceAbstractionStarter]: At program point L3914(line 3914) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,256 INFO L448 ceAbstractionStarter]: For program point L3852-1(line 3852) no Hoare annotation was computed. [2018-11-22 22:22:05,256 INFO L448 ceAbstractionStarter]: For program point L3914-1(line 3914) no Hoare annotation was computed. [2018-11-22 22:22:05,256 INFO L448 ceAbstractionStarter]: For program point usb_mouse_probeEXIT(lines 3794 3955) no Hoare annotation was computed. [2018-11-22 22:22:05,257 INFO L448 ceAbstractionStarter]: For program point L3815-1(line 3815) no Hoare annotation was computed. [2018-11-22 22:22:05,257 INFO L444 ceAbstractionStarter]: At program point L3815(line 3815) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0))) [2018-11-22 22:22:05,257 INFO L448 ceAbstractionStarter]: For program point L3877(lines 3877 3890) no Hoare annotation was computed. [2018-11-22 22:22:05,257 INFO L448 ceAbstractionStarter]: For program point L3877-2(lines 3877 3890) no Hoare annotation was computed. [2018-11-22 22:22:05,257 INFO L448 ceAbstractionStarter]: For program point L3931(lines 3931 3935) no Hoare annotation was computed. [2018-11-22 22:22:05,257 INFO L448 ceAbstractionStarter]: For program point L3894(lines 3894 3901) no Hoare annotation was computed. [2018-11-22 22:22:05,257 INFO L448 ceAbstractionStarter]: For program point L3861-1(line 3861) no Hoare annotation was computed. [2018-11-22 22:22:05,257 INFO L451 ceAbstractionStarter]: At program point L3894-2(lines 3894 3901) the Hoare annotation is: true [2018-11-22 22:22:05,257 INFO L444 ceAbstractionStarter]: At program point L3861(line 3861) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (bvadd |old(~ldv_coherent_state~0)| (_ bv1 32)) ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,257 INFO L448 ceAbstractionStarter]: For program point L3820(lines 3820 3824) no Hoare annotation was computed. [2018-11-22 22:22:05,257 INFO L444 ceAbstractionStarter]: At program point L3948(lines 3813 3954) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,258 INFO L444 ceAbstractionStarter]: At program point L3944(lines 3813 3954) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (bvadd |old(~ldv_coherent_state~0)| (_ bv1 32)) ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,258 INFO L448 ceAbstractionStarter]: For program point L3878(lines 3878 3884) no Hoare annotation was computed. [2018-11-22 22:22:05,258 INFO L448 ceAbstractionStarter]: For program point L3878-2(lines 3878 3884) no Hoare annotation was computed. [2018-11-22 22:22:05,258 INFO L448 ceAbstractionStarter]: For program point L3907-1(line 3907) no Hoare annotation was computed. [2018-11-22 22:22:05,258 INFO L451 ceAbstractionStarter]: At program point L3907(line 3907) the Hoare annotation is: true [2018-11-22 22:22:05,258 INFO L448 ceAbstractionStarter]: For program point L3841-1(line 3841) no Hoare annotation was computed. [2018-11-22 22:22:05,258 INFO L444 ceAbstractionStarter]: At program point L3841(line 3841) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,258 INFO L448 ceAbstractionStarter]: For program point L3870(lines 3870 3876) no Hoare annotation was computed. [2018-11-22 22:22:05,258 INFO L448 ceAbstractionStarter]: For program point L3903(line 3903) no Hoare annotation was computed. [2018-11-22 22:22:05,258 INFO L448 ceAbstractionStarter]: For program point L3837-1(line 3837) no Hoare annotation was computed. [2018-11-22 22:22:05,258 INFO L448 ceAbstractionStarter]: For program point L3870-2(lines 3870 3876) no Hoare annotation was computed. [2018-11-22 22:22:05,259 INFO L444 ceAbstractionStarter]: At program point L3932(lines 3813 3954) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,259 INFO L444 ceAbstractionStarter]: At program point L3837(line 3837) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (and (= ~ldv_urb_state~0 (_ bv0 32)) (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) (= (bvadd usb_mouse_probe_~error~0 (_ bv12 32)) (_ bv0 32))) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,259 INFO L448 ceAbstractionStarter]: For program point L3829-1(lines 3829 3833) no Hoare annotation was computed. [2018-11-22 22:22:05,259 INFO L444 ceAbstractionStarter]: At program point L3924(lines 3924 3925) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_coherent_state~0)|)) (not (= (_ bv0 32) |old(~ldv_urb_state~0)|))) [2018-11-22 22:22:05,259 INFO L448 ceAbstractionStarter]: For program point L3829(lines 3829 3833) no Hoare annotation was computed. [2018-11-22 22:22:05,259 INFO L448 ceAbstractionStarter]: For program point L3924-1(lines 3924 3925) no Hoare annotation was computed. [2018-11-22 22:22:05,259 INFO L448 ceAbstractionStarter]: For program point L3846(lines 3846 3850) no Hoare annotation was computed. [2018-11-22 22:22:05,259 INFO L448 ceAbstractionStarter]: For program point L3488(lines 3488 3492) no Hoare annotation was computed. [2018-11-22 22:22:05,259 INFO L448 ceAbstractionStarter]: For program point usb_make_pathEXIT(lines 3480 3495) no Hoare annotation was computed. [2018-11-22 22:22:05,259 INFO L448 ceAbstractionStarter]: For program point L3488-2(lines 3488 3492) no Hoare annotation was computed. [2018-11-22 22:22:05,260 INFO L451 ceAbstractionStarter]: At program point usb_make_pathENTRY(lines 3480 3495) the Hoare annotation is: true [2018-11-22 22:22:05,260 INFO L448 ceAbstractionStarter]: For program point usb_make_pathFINAL(lines 3480 3495) no Hoare annotation was computed. [2018-11-22 22:22:05,260 INFO L451 ceAbstractionStarter]: At program point __create_pipeENTRY(lines 3540 3546) the Hoare annotation is: true [2018-11-22 22:22:05,260 INFO L448 ceAbstractionStarter]: For program point __create_pipeFINAL(lines 3540 3546) no Hoare annotation was computed. [2018-11-22 22:22:05,260 INFO L448 ceAbstractionStarter]: For program point __create_pipeEXIT(lines 3540 3546) no Hoare annotation was computed. [2018-11-22 22:22:05,260 INFO L448 ceAbstractionStarter]: For program point L3599(line 3599) no Hoare annotation was computed. [2018-11-22 22:22:05,260 INFO L448 ceAbstractionStarter]: For program point input_allocate_deviceFINAL(lines 3598 3600) no Hoare annotation was computed. [2018-11-22 22:22:05,260 INFO L451 ceAbstractionStarter]: At program point input_allocate_deviceENTRY(lines 3598 3600) the Hoare annotation is: true [2018-11-22 22:22:05,260 INFO L448 ceAbstractionStarter]: For program point input_allocate_deviceEXIT(lines 3598 3600) no Hoare annotation was computed. [2018-11-22 22:22:05,260 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.initFINAL(line -1) no Hoare annotation was computed. [2018-11-22 22:22:05,260 INFO L444 ceAbstractionStarter]: At program point ULTIMATE.initENTRY(line -1) the Hoare annotation is: (= |old(~ldv_coherent_state~0)| ~ldv_coherent_state~0) [2018-11-22 22:22:05,260 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.initEXIT(line -1) no Hoare annotation was computed. [2018-11-22 22:22:05,261 INFO L448 ceAbstractionStarter]: For program point L3578(lines 3578 3584) no Hoare annotation was computed. [2018-11-22 22:22:05,261 INFO L448 ceAbstractionStarter]: For program point L3578-2(lines 3578 3584) no Hoare annotation was computed. [2018-11-22 22:22:05,261 INFO L451 ceAbstractionStarter]: At program point usb_maxpacketENTRY(lines 3547 3597) the Hoare annotation is: true [2018-11-22 22:22:05,261 INFO L448 ceAbstractionStarter]: For program point usb_maxpacketEXIT(lines 3547 3597) no Hoare annotation was computed. [2018-11-22 22:22:05,261 INFO L448 ceAbstractionStarter]: For program point L3562(lines 3562 3568) no Hoare annotation was computed. [2018-11-22 22:22:05,261 INFO L448 ceAbstractionStarter]: For program point L3562-2(lines 3562 3568) no Hoare annotation was computed. [2018-11-22 22:22:05,261 INFO L448 ceAbstractionStarter]: For program point L3557(lines 3557 3589) no Hoare annotation was computed. [2018-11-22 22:22:05,261 INFO L448 ceAbstractionStarter]: For program point usb_maxpacketFINAL(lines 3547 3597) no Hoare annotation was computed. [2018-11-22 22:22:05,261 INFO L448 ceAbstractionStarter]: For program point L3557-2(lines 3555 3596) no Hoare annotation was computed. [2018-11-22 22:22:05,261 INFO L448 ceAbstractionStarter]: For program point interface_to_usbdevFINAL(lines 3472 3479) no Hoare annotation was computed. [2018-11-22 22:22:05,262 INFO L451 ceAbstractionStarter]: At program point interface_to_usbdevENTRY(lines 3472 3479) the Hoare annotation is: true [2018-11-22 22:22:05,262 INFO L448 ceAbstractionStarter]: For program point interface_to_usbdevEXIT(lines 3472 3479) no Hoare annotation was computed. [2018-11-22 22:22:05,262 INFO L451 ceAbstractionStarter]: At program point ldv_check_final_stateENTRY(lines 4304 4324) the Hoare annotation is: true [2018-11-22 22:22:05,262 INFO L444 ceAbstractionStarter]: At program point L4319(line 4319) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_coherent_state~0)) (not (= (_ bv0 32) ~ldv_urb_state~0))) [2018-11-22 22:22:05,262 INFO L448 ceAbstractionStarter]: For program point L4319-1(lines 4304 4324) no Hoare annotation was computed. [2018-11-22 22:22:05,262 INFO L448 ceAbstractionStarter]: For program point L4312-1(lines 4307 4323) no Hoare annotation was computed. [2018-11-22 22:22:05,262 INFO L444 ceAbstractionStarter]: At program point L4312(line 4312) the Hoare annotation is: (or (not (= (_ bv0 32) ~ldv_coherent_state~0)) (not (= (_ bv0 32) ~ldv_urb_state~0))) [2018-11-22 22:22:05,262 INFO L448 ceAbstractionStarter]: For program point ldv_check_final_stateEXIT(lines 4304 4324) no Hoare annotation was computed. [2018-11-22 22:22:05,262 INFO L444 ceAbstractionStarter]: At program point usb_alloc_urbENTRY(lines 4241 4267) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (= ~ldv_urb_state~0 (_ bv0 32)) (not (= (_ bv1 32) ~ldv_coherent_state~0))) [2018-11-22 22:22:05,262 INFO L448 ceAbstractionStarter]: For program point L4253(lines 4253 4257) no Hoare annotation was computed. [2018-11-22 22:22:05,262 INFO L444 ceAbstractionStarter]: At program point L4247loopEntry(lines 4247 4261) the Hoare annotation is: (or (not (= (_ bv0 32) |old(~ldv_urb_state~0)|)) (= ~ldv_urb_state~0 (_ bv0 32)) (not (= (_ bv1 32) ~ldv_coherent_state~0))) [2018-11-22 22:22:05,263 INFO L448 ceAbstractionStarter]: For program point L4248(line 4248) no Hoare annotation was computed. [2018-11-22 22:22:05,263 INFO L448 ceAbstractionStarter]: For program point usb_alloc_urbFINAL(lines 4241 4267) no Hoare annotation was computed. [2018-11-22 22:22:05,263 INFO L448 ceAbstractionStarter]: For program point L4262(lines 4246 4263) no Hoare annotation was computed. [2018-11-22 22:22:05,263 INFO L448 ceAbstractionStarter]: For program point usb_alloc_urbEXIT(lines 4241 4267) no Hoare annotation was computed. [2018-11-22 22:22:05,263 INFO L451 ceAbstractionStarter]: At program point usb_registerENTRY(lines 3497 3506) the Hoare annotation is: true [2018-11-22 22:22:05,263 INFO L448 ceAbstractionStarter]: For program point usb_registerEXIT(lines 3497 3506) no Hoare annotation was computed. [2018-11-22 22:22:05,263 INFO L448 ceAbstractionStarter]: For program point usb_registerFINAL(lines 3497 3506) no Hoare annotation was computed. [2018-11-22 22:22:05,263 INFO L448 ceAbstractionStarter]: For program point usb_mouse_exitEXIT(lines 4027 4036) no Hoare annotation was computed. [2018-11-22 22:22:05,263 INFO L451 ceAbstractionStarter]: At program point usb_mouse_exitENTRY(lines 4027 4036) the Hoare annotation is: true [2018-11-22 22:22:05,263 INFO L448 ceAbstractionStarter]: For program point usb_mouse_exitFINAL(lines 4027 4036) no Hoare annotation was computed. [2018-11-22 22:22:05,263 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2018-11-22 22:22:05,264 INFO L444 ceAbstractionStarter]: At program point L-1(line -1) the Hoare annotation is: (and (= ~ldv_urb_state~0 (_ bv0 32)) (= (_ bv0 32) ~ldv_coherent_state~0)) [2018-11-22 22:22:05,264 INFO L451 ceAbstractionStarter]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2018-11-22 22:22:05,264 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2018-11-22 22:22:05,264 INFO L448 ceAbstractionStarter]: For program point L3967-1(lines 3956 3981) no Hoare annotation was computed. [2018-11-22 22:22:05,264 INFO L448 ceAbstractionStarter]: For program point L3965-1(lines 3961 3980) no Hoare annotation was computed. [2018-11-22 22:22:05,264 INFO L451 ceAbstractionStarter]: At program point L3965(line 3965) the Hoare annotation is: true [2018-11-22 22:22:05,264 INFO L448 ceAbstractionStarter]: For program point L3963-1(line 3963) no Hoare annotation was computed. [2018-11-22 22:22:05,264 INFO L451 ceAbstractionStarter]: At program point L3963(line 3963) the Hoare annotation is: true [2018-11-22 22:22:05,264 INFO L448 ceAbstractionStarter]: For program point usb_mouse_disconnectEXIT(lines 3956 3981) no Hoare annotation was computed. [2018-11-22 22:22:05,264 INFO L451 ceAbstractionStarter]: At program point usb_mouse_disconnectENTRY(lines 3956 3981) the Hoare annotation is: true [2018-11-22 22:22:05,264 INFO L451 ceAbstractionStarter]: At program point L3972(line 3972) the Hoare annotation is: true [2018-11-22 22:22:05,264 INFO L448 ceAbstractionStarter]: For program point L3973-1(line 3973) no Hoare annotation was computed. [2018-11-22 22:22:05,265 INFO L451 ceAbstractionStarter]: At program point L3973(line 3973) the Hoare annotation is: true [2018-11-22 22:22:05,265 INFO L448 ceAbstractionStarter]: For program point L3971-1(line 3971) no Hoare annotation was computed. [2018-11-22 22:22:05,265 INFO L451 ceAbstractionStarter]: At program point L3971(line 3971) the Hoare annotation is: true [2018-11-22 22:22:05,265 INFO L448 ceAbstractionStarter]: For program point L3972-1(line 3972) no Hoare annotation was computed. [2018-11-22 22:22:05,265 INFO L451 ceAbstractionStarter]: At program point ldv_blast_assertENTRY(lines 4155 4161) the Hoare annotation is: true [2018-11-22 22:22:05,265 INFO L448 ceAbstractionStarter]: For program point ldv_blast_assertEXIT(lines 4155 4161) no Hoare annotation was computed. [2018-11-22 22:22:05,265 INFO L448 ceAbstractionStarter]: For program point ldv_blast_assertFINAL(lines 4155 4161) no Hoare annotation was computed. [2018-11-22 22:22:05,265 INFO L448 ceAbstractionStarter]: For program point ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION(line 4159) no Hoare annotation was computed. [2018-11-22 22:22:05,285 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.11 10:22:05 BoogieIcfgContainer [2018-11-22 22:22:05,285 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-22 22:22:05,285 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-22 22:22:05,285 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-22 22:22:05,286 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-22 22:22:05,286 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:21:48" (3/4) ... [2018-11-22 22:22:05,290 INFO L144 WitnessPrinter]: Generating witness for correct program [2018-11-22 22:22:05,298 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_fill_int_urb [2018-11-22 22:22:05,298 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure main [2018-11-22 22:22:05,298 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_get_intfdata [2018-11-22 22:22:05,298 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_to_input_id [2018-11-22 22:22:05,298 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure kzalloc [2018-11-22 22:22:05,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure ldv_assume_stop [2018-11-22 22:22:05,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure kmalloc [2018-11-22 22:22:05,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_endpoint_dir_in [2018-11-22 22:22:05,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_free_coherent [2018-11-22 22:22:05,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_endpoint_is_int_in [2018-11-22 22:22:05,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_alloc_coherent [2018-11-22 22:22:05,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_mouse_init [2018-11-22 22:22:05,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_endpoint_xfer_int [2018-11-22 22:22:05,299 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_set_intfdata [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure input_set_drvdata [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_free_urb [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_mouse_probe [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_make_path [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure __create_pipe [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure input_allocate_device [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure ULTIMATE.init [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_maxpacket [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure interface_to_usbdev [2018-11-22 22:22:05,300 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure ldv_check_final_state [2018-11-22 22:22:05,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_alloc_urb [2018-11-22 22:22:05,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_register [2018-11-22 22:22:05,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_mouse_exit [2018-11-22 22:22:05,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure usb_mouse_disconnect [2018-11-22 22:22:05,302 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure ldv_blast_assert [2018-11-22 22:22:05,312 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 136 nodes and edges [2018-11-22 22:22:05,313 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 58 nodes and edges [2018-11-22 22:22:05,314 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 23 nodes and edges [2018-11-22 22:22:05,314 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2018-11-22 22:22:05,315 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2018-11-22 22:22:05,315 INFO L879 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2018-11-22 22:22:05,340 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || (ldv_urb_state == 0bv32 && 0bv32 == ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-22 22:22:05,341 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) [2018-11-22 22:22:05,341 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || (ldv_urb_state == 0bv32 && 0bv32 == ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-22 22:22:05,341 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (0bv32 == ldv_coherent_state || !(0bv32 == ldv_urb_state)) || !(1bv32 == \old(ldv_coherent_state)) [2018-11-22 22:22:05,341 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) [2018-11-22 22:22:05,342 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || ((ldv_urb_state == 0bv32 && ~bvadd16(\old(ldv_coherent_state), 1bv32) == ldv_coherent_state) && ~bvadd16(error, 12bv32) == 0bv32)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-22 22:22:05,342 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) [2018-11-22 22:22:05,342 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ~bvadd16(error, 12bv32) == 0bv32)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-22 22:22:05,342 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == ldv_urb_state) || \old(ldv_coherent_state) == ldv_coherent_state) || !(1bv32 == \old(ldv_coherent_state)) [2018-11-22 22:22:05,344 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == ldv_urb_state)) || \old(ldv_coherent_state) == ldv_coherent_state [2018-11-22 22:22:05,344 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(0bv32 == \old(ldv_urb_state)) || ldv_urb_state == 0bv32) || !(1bv32 == ldv_coherent_state) [2018-11-22 22:22:05,346 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) [2018-11-22 22:22:05,397 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_2fde9bc9-fd09-4cca-8cae-327c6bd91496/bin-2019/uautomizer/witness.graphml [2018-11-22 22:22:05,397 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-22 22:22:05,397 INFO L168 Benchmark]: Toolchain (without parser) took 23742.98 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 313.0 MB). Free memory was 947.9 MB in the beginning and 827.1 MB in the end (delta: 120.7 MB). Peak memory consumption was 433.7 MB. Max. memory is 11.5 GB. [2018-11-22 22:22:05,398 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:22:05,398 INFO L168 Benchmark]: CACSL2BoogieTranslator took 843.28 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 155.7 MB). Free memory was 947.9 MB in the beginning and 1.1 GB in the end (delta: -131.7 MB). Peak memory consumption was 84.5 MB. Max. memory is 11.5 GB. [2018-11-22 22:22:05,398 INFO L168 Benchmark]: Boogie Procedure Inliner took 31.05 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:22:05,399 INFO L168 Benchmark]: Boogie Preprocessor took 63.60 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2018-11-22 22:22:05,399 INFO L168 Benchmark]: RCFGBuilder took 5764.81 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 938.0 MB in the end (delta: 134.7 MB). Peak memory consumption was 134.7 MB. Max. memory is 11.5 GB. [2018-11-22 22:22:05,399 INFO L168 Benchmark]: TraceAbstraction took 16924.93 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 157.3 MB). Free memory was 938.0 MB in the beginning and 845.3 MB in the end (delta: 92.7 MB). Peak memory consumption was 250.0 MB. Max. memory is 11.5 GB. [2018-11-22 22:22:05,399 INFO L168 Benchmark]: Witness Printer took 111.84 ms. Allocated memory is still 1.3 GB. Free memory was 845.3 MB in the beginning and 827.1 MB in the end (delta: 18.2 MB). Peak memory consumption was 18.2 MB. Max. memory is 11.5 GB. [2018-11-22 22:22:05,401 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 843.28 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 155.7 MB). Free memory was 947.9 MB in the beginning and 1.1 GB in the end (delta: -131.7 MB). Peak memory consumption was 84.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 31.05 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 63.60 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 5764.81 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 938.0 MB in the end (delta: 134.7 MB). Peak memory consumption was 134.7 MB. Max. memory is 11.5 GB. * TraceAbstraction took 16924.93 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 157.3 MB). Free memory was 938.0 MB in the beginning and 845.3 MB in the end (delta: 92.7 MB). Peak memory consumption was 250.0 MB. Max. memory is 11.5 GB. * Witness Printer took 111.84 ms. Allocated memory is still 1.3 GB. Free memory was 845.3 MB in the beginning and 827.1 MB in the end (delta: 18.2 MB). Peak memory consumption was 18.2 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 4159]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 4084]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) - InvariantResult [Line: 3813]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || ((ldv_urb_state == 0bv32 && ~bvadd16(\old(ldv_coherent_state), 1bv32) == ldv_coherent_state) && ~bvadd16(error, 12bv32) == 0bv32)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 3813]: Loop Invariant Derived loop invariant: !(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 4103]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) - InvariantResult [Line: 4071]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || (ldv_urb_state == 0bv32 && 0bv32 == ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 4247]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_urb_state)) || ldv_urb_state == 0bv32) || !(1bv32 == ldv_coherent_state) - InvariantResult [Line: 4184]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == ldv_urb_state)) || \old(ldv_coherent_state) == ldv_coherent_state - InvariantResult [Line: 4100]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state))) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ldv_s_usb_mouse_driver_usb_driver == 0bv32) - InvariantResult [Line: 4211]: Loop Invariant Derived loop invariant: (!(0bv32 == ldv_urb_state) || \old(ldv_coherent_state) == ldv_coherent_state) || !(1bv32 == \old(ldv_coherent_state)) - InvariantResult [Line: 3813]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || ((ldv_urb_state == 0bv32 && \old(ldv_coherent_state) == ldv_coherent_state) && ~bvadd16(error, 12bv32) == 0bv32)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 4274]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 4165]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 4083]: Loop Invariant Derived loop invariant: (!(0bv32 == \old(ldv_coherent_state)) || (ldv_urb_state == 0bv32 && 0bv32 == ldv_coherent_state)) || !(0bv32 == \old(ldv_urb_state)) - InvariantResult [Line: 4206]: Loop Invariant Derived loop invariant: (0bv32 == ldv_coherent_state || !(0bv32 == ldv_urb_state)) || !(1bv32 == \old(ldv_coherent_state)) - InvariantResult [Line: 4269]: Loop Invariant Derived loop invariant: 1 - StatisticsResult: Ultimate Automizer benchmark data CFG has 30 procedures, 224 locations, 1 error locations. SAFE Result, 16.8s OverallTime, 11 OverallIterations, 2 TraceHistogramMax, 11.7s AutomataDifference, 0.0s DeadEndRemovalTime, 0.7s HoareAnnotationTime, HoareTripleCheckerStatistics: 2161 SDtfs, 971 SDslu, 4362 SDs, 0 SdLazy, 718 SolverSat, 208 SolverUnsat, 5 SolverUnknown, 0 SolverNotchecked, 11.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 1009 GetRequests, 976 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=948occurred in iteration=8, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 217 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 78 LocationsWithAnnotation, 1984 PreInvPairs, 2090 NumberOfFragments, 603 HoareAnnotationTreeSize, 1984 FomulaSimplifications, 76 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 78 FomulaSimplificationsInter, 540 FormulaSimplificationTreeSizeReductionInter, 0.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TraceCheckStatistics: 0.3s SsaConstructionTime, 1.8s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 1015 NumberOfCodeBlocks, 1015 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 1004 ConstructedInterpolants, 0 QuantifiedInterpolants, 164236 SizeOfPredicates, 33 NumberOfNonLiveVariables, 4696 ConjunctsInSsa, 73 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 66/66 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...