./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i -s /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 8b52ac207b5673e74fbe6c307fe646517274f5cc .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i -s /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 8b52ac207b5673e74fbe6c307fe646517274f5cc ....................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2 --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 04:36:41,730 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 04:36:41,731 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 04:36:41,738 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 04:36:41,738 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 04:36:41,739 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 04:36:41,740 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 04:36:41,741 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 04:36:41,742 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 04:36:41,742 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 04:36:41,743 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 04:36:41,743 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 04:36:41,744 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 04:36:41,745 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 04:36:41,745 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 04:36:41,746 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 04:36:41,746 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 04:36:41,748 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 04:36:41,749 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 04:36:41,750 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 04:36:41,751 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 04:36:41,751 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 04:36:41,753 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 04:36:41,753 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 04:36:41,753 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 04:36:41,754 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 04:36:41,754 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 04:36:41,755 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 04:36:41,755 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 04:36:41,756 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 04:36:41,756 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 04:36:41,757 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 04:36:41,757 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 04:36:41,757 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 04:36:41,758 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 04:36:41,758 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 04:36:41,758 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf [2018-11-23 04:36:41,768 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 04:36:41,768 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 04:36:41,768 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 04:36:41,768 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 04:36:41,769 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 04:36:41,769 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 04:36:41,769 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 04:36:41,769 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 04:36:41,769 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 04:36:41,770 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 04:36:41,770 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 04:36:41,770 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 04:36:41,770 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 04:36:41,770 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 04:36:41,770 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 04:36:41,770 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 04:36:41,770 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 04:36:41,770 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 04:36:41,770 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 04:36:41,771 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 04:36:41,771 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 04:36:41,771 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 04:36:41,771 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 04:36:41,771 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 04:36:41,771 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 04:36:41,771 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 04:36:41,771 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 04:36:41,771 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 04:36:41,771 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8b52ac207b5673e74fbe6c307fe646517274f5cc [2018-11-23 04:36:41,792 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 04:36:41,800 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 04:36:41,802 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 04:36:41,803 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 04:36:41,803 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 04:36:41,803 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 04:36:41,838 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data/946f10769/99fa8d6f38ee4154ae2ca4c531fbc313/FLAG0ececd9e0 [2018-11-23 04:36:42,287 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 04:36:42,288 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 04:36:42,310 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data/946f10769/99fa8d6f38ee4154ae2ca4c531fbc313/FLAG0ececd9e0 [2018-11-23 04:36:42,319 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data/946f10769/99fa8d6f38ee4154ae2ca4c531fbc313 [2018-11-23 04:36:42,322 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 04:36:42,323 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 04:36:42,323 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 04:36:42,323 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 04:36:42,326 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 04:36:42,326 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:36:42" (1/1) ... [2018-11-23 04:36:42,328 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3c1e507d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:42, skipping insertion in model container [2018-11-23 04:36:42,328 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:36:42" (1/1) ... [2018-11-23 04:36:42,334 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 04:36:42,394 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 04:36:43,250 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 04:36:43,273 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 04:36:43,453 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 04:36:43,630 INFO L195 MainTranslator]: Completed translation [2018-11-23 04:36:43,630 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43 WrapperNode [2018-11-23 04:36:43,630 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 04:36:43,631 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 04:36:43,631 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 04:36:43,631 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 04:36:43,638 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... [2018-11-23 04:36:43,670 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... [2018-11-23 04:36:43,682 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 04:36:43,683 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 04:36:43,683 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 04:36:43,683 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 04:36:43,691 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... [2018-11-23 04:36:43,691 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... [2018-11-23 04:36:43,698 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... [2018-11-23 04:36:43,699 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... [2018-11-23 04:36:43,739 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... [2018-11-23 04:36:43,748 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... [2018-11-23 04:36:43,757 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... [2018-11-23 04:36:43,766 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 04:36:43,766 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 04:36:43,767 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 04:36:43,767 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 04:36:43,767 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 04:36:43,812 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2018-11-23 04:36:43,812 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2018-11-23 04:36:43,812 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-23 04:36:43,812 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2018-11-23 04:36:43,812 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_start_xmit [2018-11-23 04:36:43,813 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_start_xmit [2018-11-23 04:36:43,813 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_init [2018-11-23 04:36:43,813 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_init [2018-11-23 04:36:43,813 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-11-23 04:36:43,813 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2018-11-23 04:36:43,813 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2018-11-23 04:36:43,813 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2018-11-23 04:36:43,814 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 04:36:43,814 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2018-11-23 04:36:43,814 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 04:36:43,814 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 04:36:43,814 INFO L130 BoogieDeclarations]: Found specification of procedure usb_deregister [2018-11-23 04:36:43,814 INFO L130 BoogieDeclarations]: Found specification of procedure init_params_sja1000 [2018-11-23 04:36:43,814 INFO L138 BoogieDeclarations]: Found implementation of procedure init_params_sja1000 [2018-11-23 04:36:43,815 INFO L130 BoogieDeclarations]: Found specification of procedure netif_tx_start_queue [2018-11-23 04:36:43,815 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_tx_start_queue [2018-11-23 04:36:43,815 INFO L130 BoogieDeclarations]: Found specification of procedure can_free_echo_skb [2018-11-23 04:36:43,815 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_control_cmd [2018-11-23 04:36:43,815 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_control_cmd [2018-11-23 04:36:43,815 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-23 04:36:43,815 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-23 04:36:43,815 INFO L130 BoogieDeclarations]: Found specification of procedure can_put_echo_skb [2018-11-23 04:36:43,816 INFO L130 BoogieDeclarations]: Found specification of procedure open_candev [2018-11-23 04:36:43,816 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2018-11-23 04:36:43,816 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2018-11-23 04:36:43,816 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_exit [2018-11-23 04:36:43,816 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_exit [2018-11-23 04:36:43,816 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_int_urb [2018-11-23 04:36:43,816 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_int_urb [2018-11-23 04:36:43,816 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_anchored_urbs [2018-11-23 04:36:43,817 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 04:36:43,817 INFO L130 BoogieDeclarations]: Found specification of procedure init_usb_anchor [2018-11-23 04:36:43,817 INFO L138 BoogieDeclarations]: Found implementation of procedure init_usb_anchor [2018-11-23 04:36:43,817 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 04:36:43,817 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2018-11-23 04:36:43,817 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2018-11-23 04:36:43,817 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_assume_stop [2018-11-23 04:36:43,818 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_assume_stop [2018-11-23 04:36:43,818 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value [2018-11-23 04:36:43,818 INFO L130 BoogieDeclarations]: Found specification of procedure clear_bit [2018-11-23 04:36:43,818 INFO L138 BoogieDeclarations]: Found implementation of procedure clear_bit [2018-11-23 04:36:43,818 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2018-11-23 04:36:43,818 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2018-11-23 04:36:43,818 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2018-11-23 04:36:43,819 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2018-11-23 04:36:43,819 INFO L130 BoogieDeclarations]: Found specification of procedure netif_stop_queue [2018-11-23 04:36:43,819 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_stop_queue [2018-11-23 04:36:43,819 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_command_msg [2018-11-23 04:36:43,819 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_command_msg [2018-11-23 04:36:43,819 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 04:36:43,819 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 04:36:43,819 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2018-11-23 04:36:43,820 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2018-11-23 04:36:43,820 INFO L130 BoogieDeclarations]: Found specification of procedure unlink_all_urbs [2018-11-23 04:36:43,820 INFO L138 BoogieDeclarations]: Found implementation of procedure unlink_all_urbs [2018-11-23 04:36:43,820 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2018-11-23 04:36:43,820 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2018-11-23 04:36:43,820 INFO L130 BoogieDeclarations]: Found specification of procedure consume_skb [2018-11-23 04:36:43,820 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2018-11-23 04:36:43,821 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 04:36:43,821 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 04:36:43,821 INFO L130 BoogieDeclarations]: Found specification of procedure netif_start_queue [2018-11-23 04:36:43,821 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_start_queue [2018-11-23 04:36:43,821 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 04:36:43,821 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2018-11-23 04:36:43,821 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2018-11-23 04:36:43,821 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2018-11-23 04:36:43,822 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_write_mode [2018-11-23 04:36:43,822 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_write_mode [2018-11-23 04:36:43,822 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_coherent [2018-11-23 04:36:43,822 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_coherent [2018-11-23 04:36:43,822 INFO L130 BoogieDeclarations]: Found specification of procedure register_candev [2018-11-23 04:36:43,822 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_coherent [2018-11-23 04:36:43,822 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_coherent [2018-11-23 04:36:43,823 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_probe [2018-11-23 04:36:43,823 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_probe [2018-11-23 04:36:43,823 INFO L130 BoogieDeclarations]: Found specification of procedure netif_tx_stop_queue [2018-11-23 04:36:43,823 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_tx_stop_queue [2018-11-23 04:36:43,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 04:36:43,823 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_disconnect [2018-11-23 04:36:43,823 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_disconnect [2018-11-23 04:36:43,823 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2018-11-23 04:36:43,824 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2018-11-23 04:36:43,824 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register_driver [2018-11-23 04:36:43,824 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_close [2018-11-23 04:36:43,824 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_close [2018-11-23 04:36:43,824 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2018-11-23 04:36:43,824 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2018-11-23 04:36:43,824 INFO L130 BoogieDeclarations]: Found specification of procedure usb_register [2018-11-23 04:36:43,824 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_register [2018-11-23 04:36:43,825 INFO L130 BoogieDeclarations]: Found specification of procedure usb_anchor_urb [2018-11-23 04:36:43,825 INFO L130 BoogieDeclarations]: Found specification of procedure can_dropped_invalid_skb [2018-11-23 04:36:43,825 INFO L138 BoogieDeclarations]: Found implementation of procedure can_dropped_invalid_skb [2018-11-23 04:36:43,825 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blast_assert [2018-11-23 04:36:43,825 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blast_assert [2018-11-23 04:36:43,825 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 04:36:43,825 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-23 04:36:43,825 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_open [2018-11-23 04:36:43,826 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_open [2018-11-23 04:36:43,826 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 04:36:43,826 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2018-11-23 04:36:43,826 INFO L130 BoogieDeclarations]: Found specification of procedure kfree_skb [2018-11-23 04:36:43,826 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2018-11-23 04:36:43,826 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2018-11-23 04:36:43,826 INFO L130 BoogieDeclarations]: Found specification of procedure netif_device_detach [2018-11-23 04:36:43,826 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2018-11-23 04:36:43,827 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2018-11-23 04:36:43,827 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2018-11-23 04:36:43,827 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2018-11-23 04:36:43,827 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unanchor_urb [2018-11-23 04:36:43,827 INFO L130 BoogieDeclarations]: Found specification of procedure __init_waitqueue_head [2018-11-23 04:36:43,827 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2018-11-23 04:36:43,827 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2018-11-23 04:36:43,827 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_get_tx_queue [2018-11-23 04:36:43,828 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_get_tx_queue [2018-11-23 04:36:43,828 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2018-11-23 04:36:43,828 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2018-11-23 04:36:43,828 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undefined_pointer [2018-11-23 04:36:43,828 INFO L130 BoogieDeclarations]: Found specification of procedure close_candev [2018-11-23 04:36:43,828 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 04:36:43,828 INFO L130 BoogieDeclarations]: Found specification of procedure free_candev [2018-11-23 04:36:43,828 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2018-11-23 04:36:43,829 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2018-11-23 04:36:43,829 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-23 04:36:43,829 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-23 04:36:43,829 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2018-11-23 04:36:43,829 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2018-11-23 04:36:43,829 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_netdev [2018-11-23 04:36:43,829 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 04:36:43,829 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 04:36:43,830 INFO L130 BoogieDeclarations]: Found specification of procedure ems_usb_start [2018-11-23 04:36:43,830 INFO L138 BoogieDeclarations]: Found implementation of procedure ems_usb_start [2018-11-23 04:36:43,830 INFO L130 BoogieDeclarations]: Found specification of procedure alloc_candev [2018-11-23 04:36:44,385 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 04:36:44,385 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 04:36:47,984 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 04:36:47,984 INFO L280 CfgBuilder]: Removed 13 assue(true) statements. [2018-11-23 04:36:47,984 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:36:47 BoogieIcfgContainer [2018-11-23 04:36:47,984 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 04:36:47,985 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 04:36:47,985 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 04:36:47,988 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 04:36:47,988 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 04:36:42" (1/3) ... [2018-11-23 04:36:47,989 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58a9f744 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 04:36:47, skipping insertion in model container [2018-11-23 04:36:47,989 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:36:43" (2/3) ... [2018-11-23 04:36:47,989 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58a9f744 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 04:36:47, skipping insertion in model container [2018-11-23 04:36:47,989 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:36:47" (3/3) ... [2018-11-23 04:36:47,991 INFO L112 eAbstractionObserver]: Analyzing ICFG usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 04:36:47,999 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 04:36:48,005 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 04:36:48,017 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 04:36:48,042 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 04:36:48,043 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 04:36:48,044 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 04:36:48,044 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 04:36:48,044 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 04:36:48,044 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 04:36:48,044 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 04:36:48,044 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 04:36:48,045 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 04:36:48,065 INFO L276 IsEmpty]: Start isEmpty. Operand 416 states. [2018-11-23 04:36:48,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2018-11-23 04:36:48,070 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:36:48,070 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:36:48,072 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:36:48,077 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:36:48,077 INFO L82 PathProgramCache]: Analyzing trace with hash 255533861, now seen corresponding path program 1 times [2018-11-23 04:36:48,079 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:36:48,079 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:36:48,141 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:48,142 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:36:48,142 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:48,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:36:48,395 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:36:48,397 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:36:48,397 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 04:36:48,399 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 04:36:48,407 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 04:36:48,407 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:36:48,409 INFO L87 Difference]: Start difference. First operand 416 states. Second operand 3 states. [2018-11-23 04:36:48,522 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:36:48,523 INFO L93 Difference]: Finished difference Result 1193 states and 1658 transitions. [2018-11-23 04:36:48,523 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 04:36:48,525 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 22 [2018-11-23 04:36:48,525 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:36:48,541 INFO L225 Difference]: With dead ends: 1193 [2018-11-23 04:36:48,541 INFO L226 Difference]: Without dead ends: 782 [2018-11-23 04:36:48,547 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:36:48,563 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 782 states. [2018-11-23 04:36:48,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 782 to 778. [2018-11-23 04:36:48,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 778 states. [2018-11-23 04:36:48,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 778 states to 778 states and 992 transitions. [2018-11-23 04:36:48,630 INFO L78 Accepts]: Start accepts. Automaton has 778 states and 992 transitions. Word has length 22 [2018-11-23 04:36:48,630 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:36:48,630 INFO L480 AbstractCegarLoop]: Abstraction has 778 states and 992 transitions. [2018-11-23 04:36:48,630 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 04:36:48,630 INFO L276 IsEmpty]: Start isEmpty. Operand 778 states and 992 transitions. [2018-11-23 04:36:48,630 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-23 04:36:48,631 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:36:48,631 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:36:48,631 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:36:48,631 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:36:48,631 INFO L82 PathProgramCache]: Analyzing trace with hash -668720083, now seen corresponding path program 1 times [2018-11-23 04:36:48,631 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:36:48,631 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:36:48,635 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:48,635 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:36:48,635 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:48,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:36:48,709 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:36:48,709 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:36:48,709 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 04:36:48,710 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 04:36:48,710 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 04:36:48,710 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:36:48,710 INFO L87 Difference]: Start difference. First operand 778 states and 992 transitions. Second operand 3 states. [2018-11-23 04:36:48,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:36:48,779 INFO L93 Difference]: Finished difference Result 2295 states and 2961 transitions. [2018-11-23 04:36:48,780 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 04:36:48,780 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 23 [2018-11-23 04:36:48,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:36:48,787 INFO L225 Difference]: With dead ends: 2295 [2018-11-23 04:36:48,787 INFO L226 Difference]: Without dead ends: 1528 [2018-11-23 04:36:48,789 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:36:48,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1528 states. [2018-11-23 04:36:48,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1528 to 1521. [2018-11-23 04:36:48,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1521 states. [2018-11-23 04:36:48,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1521 states to 1521 states and 1953 transitions. [2018-11-23 04:36:48,843 INFO L78 Accepts]: Start accepts. Automaton has 1521 states and 1953 transitions. Word has length 23 [2018-11-23 04:36:48,843 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:36:48,843 INFO L480 AbstractCegarLoop]: Abstraction has 1521 states and 1953 transitions. [2018-11-23 04:36:48,843 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 04:36:48,844 INFO L276 IsEmpty]: Start isEmpty. Operand 1521 states and 1953 transitions. [2018-11-23 04:36:48,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-23 04:36:48,846 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:36:48,846 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:36:48,846 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:36:48,846 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:36:48,847 INFO L82 PathProgramCache]: Analyzing trace with hash 1672540150, now seen corresponding path program 1 times [2018-11-23 04:36:48,847 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:36:48,847 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:36:48,850 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:48,850 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:36:48,850 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:48,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:36:48,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:36:48,922 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:36:48,922 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 04:36:48,922 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 04:36:48,922 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 04:36:48,922 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:36:48,923 INFO L87 Difference]: Start difference. First operand 1521 states and 1953 transitions. Second operand 5 states. [2018-11-23 04:36:48,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:36:48,978 INFO L93 Difference]: Finished difference Result 3028 states and 3891 transitions. [2018-11-23 04:36:48,981 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 04:36:48,981 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 60 [2018-11-23 04:36:48,981 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:36:48,986 INFO L225 Difference]: With dead ends: 3028 [2018-11-23 04:36:48,986 INFO L226 Difference]: Without dead ends: 1521 [2018-11-23 04:36:48,989 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:36:48,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1521 states. [2018-11-23 04:36:49,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1521 to 1521. [2018-11-23 04:36:49,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1521 states. [2018-11-23 04:36:49,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1521 states to 1521 states and 1952 transitions. [2018-11-23 04:36:49,025 INFO L78 Accepts]: Start accepts. Automaton has 1521 states and 1952 transitions. Word has length 60 [2018-11-23 04:36:49,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:36:49,025 INFO L480 AbstractCegarLoop]: Abstraction has 1521 states and 1952 transitions. [2018-11-23 04:36:49,025 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 04:36:49,025 INFO L276 IsEmpty]: Start isEmpty. Operand 1521 states and 1952 transitions. [2018-11-23 04:36:49,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-23 04:36:49,027 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:36:49,027 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:36:49,027 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:36:49,027 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:36:49,028 INFO L82 PathProgramCache]: Analyzing trace with hash -651487689, now seen corresponding path program 1 times [2018-11-23 04:36:49,028 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:36:49,029 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:36:49,031 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:49,032 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:36:49,032 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:49,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:36:49,098 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:36:49,098 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:36:49,098 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 04:36:49,099 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 04:36:49,099 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 04:36:49,099 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:36:49,099 INFO L87 Difference]: Start difference. First operand 1521 states and 1952 transitions. Second operand 3 states. [2018-11-23 04:36:49,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:36:49,166 INFO L93 Difference]: Finished difference Result 3122 states and 4062 transitions. [2018-11-23 04:36:49,167 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 04:36:49,167 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 60 [2018-11-23 04:36:49,167 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:36:49,172 INFO L225 Difference]: With dead ends: 3122 [2018-11-23 04:36:49,172 INFO L226 Difference]: Without dead ends: 1618 [2018-11-23 04:36:49,176 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:36:49,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1618 states. [2018-11-23 04:36:49,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1618 to 1612. [2018-11-23 04:36:49,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1612 states. [2018-11-23 04:36:49,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1612 states to 1612 states and 2106 transitions. [2018-11-23 04:36:49,219 INFO L78 Accepts]: Start accepts. Automaton has 1612 states and 2106 transitions. Word has length 60 [2018-11-23 04:36:49,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:36:49,219 INFO L480 AbstractCegarLoop]: Abstraction has 1612 states and 2106 transitions. [2018-11-23 04:36:49,220 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 04:36:49,220 INFO L276 IsEmpty]: Start isEmpty. Operand 1612 states and 2106 transitions. [2018-11-23 04:36:49,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-23 04:36:49,224 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:36:49,224 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:36:49,224 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:36:49,224 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:36:49,225 INFO L82 PathProgramCache]: Analyzing trace with hash 632417388, now seen corresponding path program 1 times [2018-11-23 04:36:49,225 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:36:49,225 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:36:49,227 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:49,227 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:36:49,227 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:49,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:36:49,438 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2018-11-23 04:36:49,438 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:36:49,438 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 04:36:49,439 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 04:36:49,439 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 04:36:49,439 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 04:36:49,439 INFO L87 Difference]: Start difference. First operand 1612 states and 2106 transitions. Second operand 7 states. [2018-11-23 04:36:49,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:36:49,562 INFO L93 Difference]: Finished difference Result 3246 states and 4268 transitions. [2018-11-23 04:36:49,562 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 04:36:49,562 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 83 [2018-11-23 04:36:49,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:36:49,569 INFO L225 Difference]: With dead ends: 3246 [2018-11-23 04:36:49,569 INFO L226 Difference]: Without dead ends: 1652 [2018-11-23 04:36:49,574 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2018-11-23 04:36:49,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1652 states. [2018-11-23 04:36:49,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1652 to 1642. [2018-11-23 04:36:49,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1642 states. [2018-11-23 04:36:49,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1642 states to 1642 states and 2139 transitions. [2018-11-23 04:36:49,629 INFO L78 Accepts]: Start accepts. Automaton has 1642 states and 2139 transitions. Word has length 83 [2018-11-23 04:36:49,630 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:36:49,630 INFO L480 AbstractCegarLoop]: Abstraction has 1642 states and 2139 transitions. [2018-11-23 04:36:49,630 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 04:36:49,630 INFO L276 IsEmpty]: Start isEmpty. Operand 1642 states and 2139 transitions. [2018-11-23 04:36:49,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 04:36:49,631 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:36:49,632 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:36:49,632 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:36:49,632 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:36:49,632 INFO L82 PathProgramCache]: Analyzing trace with hash -98966959, now seen corresponding path program 1 times [2018-11-23 04:36:49,632 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:36:49,632 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:36:49,635 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:49,635 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:36:49,635 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:49,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:36:49,737 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2018-11-23 04:36:49,738 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:36:49,738 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 04:36:49,738 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 04:36:49,738 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 04:36:49,738 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:36:49,739 INFO L87 Difference]: Start difference. First operand 1642 states and 2139 transitions. Second operand 5 states. [2018-11-23 04:36:49,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:36:49,850 INFO L93 Difference]: Finished difference Result 3182 states and 4156 transitions. [2018-11-23 04:36:49,851 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 04:36:49,851 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 84 [2018-11-23 04:36:49,851 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:36:49,857 INFO L225 Difference]: With dead ends: 3182 [2018-11-23 04:36:49,857 INFO L226 Difference]: Without dead ends: 1558 [2018-11-23 04:36:49,863 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:36:49,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1558 states. [2018-11-23 04:36:49,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1558 to 1551. [2018-11-23 04:36:49,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1551 states. [2018-11-23 04:36:49,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1551 states to 1551 states and 2007 transitions. [2018-11-23 04:36:49,915 INFO L78 Accepts]: Start accepts. Automaton has 1551 states and 2007 transitions. Word has length 84 [2018-11-23 04:36:49,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:36:49,916 INFO L480 AbstractCegarLoop]: Abstraction has 1551 states and 2007 transitions. [2018-11-23 04:36:49,916 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 04:36:49,916 INFO L276 IsEmpty]: Start isEmpty. Operand 1551 states and 2007 transitions. [2018-11-23 04:36:49,918 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 04:36:49,918 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:36:49,918 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:36:49,919 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:36:49,919 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:36:49,919 INFO L82 PathProgramCache]: Analyzing trace with hash -2040271303, now seen corresponding path program 1 times [2018-11-23 04:36:49,919 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:36:49,919 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:36:49,922 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:49,922 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:36:49,922 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:49,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:36:50,021 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:36:50,022 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:36:50,022 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 04:36:50,022 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 04:36:50,022 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 04:36:50,022 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:36:50,022 INFO L87 Difference]: Start difference. First operand 1551 states and 2007 transitions. Second operand 5 states. [2018-11-23 04:36:50,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:36:50,083 INFO L93 Difference]: Finished difference Result 2387 states and 3097 transitions. [2018-11-23 04:36:50,084 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 04:36:50,084 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 68 [2018-11-23 04:36:50,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:36:50,089 INFO L225 Difference]: With dead ends: 2387 [2018-11-23 04:36:50,090 INFO L226 Difference]: Without dead ends: 1554 [2018-11-23 04:36:50,092 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:36:50,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1554 states. [2018-11-23 04:36:50,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1554 to 1550. [2018-11-23 04:36:50,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1550 states. [2018-11-23 04:36:50,141 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1550 states to 1550 states and 2001 transitions. [2018-11-23 04:36:50,141 INFO L78 Accepts]: Start accepts. Automaton has 1550 states and 2001 transitions. Word has length 68 [2018-11-23 04:36:50,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:36:50,142 INFO L480 AbstractCegarLoop]: Abstraction has 1550 states and 2001 transitions. [2018-11-23 04:36:50,142 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 04:36:50,142 INFO L276 IsEmpty]: Start isEmpty. Operand 1550 states and 2001 transitions. [2018-11-23 04:36:50,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 04:36:50,143 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:36:50,143 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:36:50,143 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:36:50,143 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:36:50,143 INFO L82 PathProgramCache]: Analyzing trace with hash -2137023248, now seen corresponding path program 1 times [2018-11-23 04:36:50,143 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:36:50,143 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:36:50,146 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:50,146 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:36:50,146 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:50,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:36:50,235 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:36:50,235 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:36:50,236 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 04:36:50,236 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 04:36:50,236 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 04:36:50,236 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:36:50,236 INFO L87 Difference]: Start difference. First operand 1550 states and 2001 transitions. Second operand 5 states. [2018-11-23 04:36:50,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:36:50,377 INFO L93 Difference]: Finished difference Result 3121 states and 4026 transitions. [2018-11-23 04:36:50,377 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 04:36:50,377 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 84 [2018-11-23 04:36:50,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:36:50,383 INFO L225 Difference]: With dead ends: 3121 [2018-11-23 04:36:50,383 INFO L226 Difference]: Without dead ends: 1585 [2018-11-23 04:36:50,388 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:36:50,389 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1585 states. [2018-11-23 04:36:50,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1585 to 1562. [2018-11-23 04:36:50,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1562 states. [2018-11-23 04:36:50,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1562 states to 1562 states and 2012 transitions. [2018-11-23 04:36:50,435 INFO L78 Accepts]: Start accepts. Automaton has 1562 states and 2012 transitions. Word has length 84 [2018-11-23 04:36:50,435 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:36:50,435 INFO L480 AbstractCegarLoop]: Abstraction has 1562 states and 2012 transitions. [2018-11-23 04:36:50,436 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 04:36:50,436 INFO L276 IsEmpty]: Start isEmpty. Operand 1562 states and 2012 transitions. [2018-11-23 04:36:50,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 04:36:50,436 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:36:50,437 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:36:50,437 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:36:50,437 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:36:50,437 INFO L82 PathProgramCache]: Analyzing trace with hash 1472427321, now seen corresponding path program 1 times [2018-11-23 04:36:50,437 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:36:50,437 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:36:50,440 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:50,440 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:36:50,440 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:36:50,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:36:50,584 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:36:50,585 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:36:50,585 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 04:36:50,585 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 04:36:50,585 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 04:36:50,585 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 04:36:50,586 INFO L87 Difference]: Start difference. First operand 1562 states and 2012 transitions. Second operand 6 states. [2018-11-23 04:37:01,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:01,426 INFO L93 Difference]: Finished difference Result 2859 states and 3881 transitions. [2018-11-23 04:37:01,426 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 04:37:01,426 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 68 [2018-11-23 04:37:01,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:01,434 INFO L225 Difference]: With dead ends: 2859 [2018-11-23 04:37:01,434 INFO L226 Difference]: Without dead ends: 2854 [2018-11-23 04:37:01,435 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2018-11-23 04:37:01,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2854 states. [2018-11-23 04:37:01,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2854 to 2814. [2018-11-23 04:37:01,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2814 states. [2018-11-23 04:37:01,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2814 states to 2814 states and 3824 transitions. [2018-11-23 04:37:01,502 INFO L78 Accepts]: Start accepts. Automaton has 2814 states and 3824 transitions. Word has length 68 [2018-11-23 04:37:01,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:01,502 INFO L480 AbstractCegarLoop]: Abstraction has 2814 states and 3824 transitions. [2018-11-23 04:37:01,502 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 04:37:01,502 INFO L276 IsEmpty]: Start isEmpty. Operand 2814 states and 3824 transitions. [2018-11-23 04:37:01,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2018-11-23 04:37:01,503 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:01,503 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:01,504 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:01,504 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:01,505 INFO L82 PathProgramCache]: Analyzing trace with hash 1070891746, now seen corresponding path program 1 times [2018-11-23 04:37:01,505 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:01,505 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:01,507 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:01,507 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:01,507 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:01,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:37:01,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:37:01,570 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:37:01,570 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 04:37:01,571 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 04:37:01,571 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 04:37:01,571 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:37:01,571 INFO L87 Difference]: Start difference. First operand 2814 states and 3824 transitions. Second operand 3 states. [2018-11-23 04:37:01,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:01,657 INFO L93 Difference]: Finished difference Result 5046 states and 6985 transitions. [2018-11-23 04:37:01,658 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 04:37:01,658 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 75 [2018-11-23 04:37:01,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:01,666 INFO L225 Difference]: With dead ends: 5046 [2018-11-23 04:37:01,666 INFO L226 Difference]: Without dead ends: 2954 [2018-11-23 04:37:01,670 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:37:01,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2954 states. [2018-11-23 04:37:01,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2954 to 2822. [2018-11-23 04:37:01,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2822 states. [2018-11-23 04:37:01,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2822 states to 2822 states and 3832 transitions. [2018-11-23 04:37:01,739 INFO L78 Accepts]: Start accepts. Automaton has 2822 states and 3832 transitions. Word has length 75 [2018-11-23 04:37:01,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:01,740 INFO L480 AbstractCegarLoop]: Abstraction has 2822 states and 3832 transitions. [2018-11-23 04:37:01,740 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 04:37:01,740 INFO L276 IsEmpty]: Start isEmpty. Operand 2822 states and 3832 transitions. [2018-11-23 04:37:01,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2018-11-23 04:37:01,741 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:01,741 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:01,741 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:01,742 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:01,742 INFO L82 PathProgramCache]: Analyzing trace with hash -1851033951, now seen corresponding path program 1 times [2018-11-23 04:37:01,742 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:01,742 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:01,744 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:01,745 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:01,745 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:01,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:37:01,835 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:37:01,835 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:37:01,835 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 04:37:01,835 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 04:37:01,835 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 04:37:01,835 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:37:01,836 INFO L87 Difference]: Start difference. First operand 2822 states and 3832 transitions. Second operand 5 states. [2018-11-23 04:37:01,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:01,896 INFO L93 Difference]: Finished difference Result 4840 states and 6648 transitions. [2018-11-23 04:37:01,896 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 04:37:01,897 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 77 [2018-11-23 04:37:01,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:01,904 INFO L225 Difference]: With dead ends: 4840 [2018-11-23 04:37:01,904 INFO L226 Difference]: Without dead ends: 2740 [2018-11-23 04:37:01,908 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:37:01,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2740 states. [2018-11-23 04:37:01,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2740 to 2736. [2018-11-23 04:37:01,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2736 states. [2018-11-23 04:37:01,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2736 states to 2736 states and 3711 transitions. [2018-11-23 04:37:01,975 INFO L78 Accepts]: Start accepts. Automaton has 2736 states and 3711 transitions. Word has length 77 [2018-11-23 04:37:01,975 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:01,975 INFO L480 AbstractCegarLoop]: Abstraction has 2736 states and 3711 transitions. [2018-11-23 04:37:01,976 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 04:37:01,976 INFO L276 IsEmpty]: Start isEmpty. Operand 2736 states and 3711 transitions. [2018-11-23 04:37:01,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2018-11-23 04:37:01,977 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:01,977 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:01,977 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:01,977 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:01,977 INFO L82 PathProgramCache]: Analyzing trace with hash 405877056, now seen corresponding path program 1 times [2018-11-23 04:37:01,977 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:01,977 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:01,979 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:01,979 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:01,979 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:02,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:37:02,100 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:37:02,100 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:37:02,100 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 04:37:02,100 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 04:37:02,100 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 04:37:02,101 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 04:37:02,101 INFO L87 Difference]: Start difference. First operand 2736 states and 3711 transitions. Second operand 6 states. [2018-11-23 04:37:10,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:10,975 INFO L93 Difference]: Finished difference Result 5212 states and 7470 transitions. [2018-11-23 04:37:10,976 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 04:37:10,976 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 77 [2018-11-23 04:37:10,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:10,997 INFO L225 Difference]: With dead ends: 5212 [2018-11-23 04:37:10,998 INFO L226 Difference]: Without dead ends: 5209 [2018-11-23 04:37:11,000 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=35, Unknown=0, NotChecked=0, Total=56 [2018-11-23 04:37:11,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5209 states. [2018-11-23 04:37:11,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5209 to 5126. [2018-11-23 04:37:11,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5126 states. [2018-11-23 04:37:11,192 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5126 states to 5126 states and 7342 transitions. [2018-11-23 04:37:11,192 INFO L78 Accepts]: Start accepts. Automaton has 5126 states and 7342 transitions. Word has length 77 [2018-11-23 04:37:11,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:11,193 INFO L480 AbstractCegarLoop]: Abstraction has 5126 states and 7342 transitions. [2018-11-23 04:37:11,193 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 04:37:11,193 INFO L276 IsEmpty]: Start isEmpty. Operand 5126 states and 7342 transitions. [2018-11-23 04:37:11,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 04:37:11,194 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:11,194 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:11,194 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:11,195 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:11,195 INFO L82 PathProgramCache]: Analyzing trace with hash 509819259, now seen corresponding path program 1 times [2018-11-23 04:37:11,195 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:11,195 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:11,197 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:11,198 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:11,198 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:11,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:37:11,306 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:37:11,306 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:37:11,307 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 04:37:11,307 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 04:37:11,307 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 04:37:11,307 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:37:11,307 INFO L87 Difference]: Start difference. First operand 5126 states and 7342 transitions. Second operand 3 states. [2018-11-23 04:37:11,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:11,467 INFO L93 Difference]: Finished difference Result 9987 states and 14637 transitions. [2018-11-23 04:37:11,467 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 04:37:11,467 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 84 [2018-11-23 04:37:11,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:11,487 INFO L225 Difference]: With dead ends: 9987 [2018-11-23 04:37:11,487 INFO L226 Difference]: Without dead ends: 4879 [2018-11-23 04:37:11,506 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:37:11,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4879 states. [2018-11-23 04:37:11,715 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4879 to 4851. [2018-11-23 04:37:11,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4851 states. [2018-11-23 04:37:11,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4851 states to 4851 states and 6852 transitions. [2018-11-23 04:37:11,731 INFO L78 Accepts]: Start accepts. Automaton has 4851 states and 6852 transitions. Word has length 84 [2018-11-23 04:37:11,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:11,731 INFO L480 AbstractCegarLoop]: Abstraction has 4851 states and 6852 transitions. [2018-11-23 04:37:11,731 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 04:37:11,731 INFO L276 IsEmpty]: Start isEmpty. Operand 4851 states and 6852 transitions. [2018-11-23 04:37:11,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2018-11-23 04:37:11,732 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:11,733 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:11,733 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:11,733 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:11,733 INFO L82 PathProgramCache]: Analyzing trace with hash -1371034304, now seen corresponding path program 1 times [2018-11-23 04:37:11,733 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:11,733 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:11,735 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:11,735 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:11,736 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:11,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:37:11,995 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2018-11-23 04:37:11,995 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:37:11,995 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-23 04:37:11,995 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-23 04:37:11,996 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-23 04:37:11,996 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2018-11-23 04:37:11,996 INFO L87 Difference]: Start difference. First operand 4851 states and 6852 transitions. Second operand 8 states. [2018-11-23 04:37:20,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:20,693 INFO L93 Difference]: Finished difference Result 9990 states and 15299 transitions. [2018-11-23 04:37:20,694 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 04:37:20,694 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 86 [2018-11-23 04:37:20,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:20,728 INFO L225 Difference]: With dead ends: 9990 [2018-11-23 04:37:20,728 INFO L226 Difference]: Without dead ends: 7924 [2018-11-23 04:37:20,738 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=50, Invalid=106, Unknown=0, NotChecked=0, Total=156 [2018-11-23 04:37:20,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7924 states. [2018-11-23 04:37:21,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7924 to 7009. [2018-11-23 04:37:21,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7009 states. [2018-11-23 04:37:21,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7009 states to 7009 states and 10173 transitions. [2018-11-23 04:37:21,054 INFO L78 Accepts]: Start accepts. Automaton has 7009 states and 10173 transitions. Word has length 86 [2018-11-23 04:37:21,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:21,055 INFO L480 AbstractCegarLoop]: Abstraction has 7009 states and 10173 transitions. [2018-11-23 04:37:21,055 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-23 04:37:21,055 INFO L276 IsEmpty]: Start isEmpty. Operand 7009 states and 10173 transitions. [2018-11-23 04:37:21,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2018-11-23 04:37:21,057 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:21,057 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:21,057 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:21,057 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:21,057 INFO L82 PathProgramCache]: Analyzing trace with hash -1562829487, now seen corresponding path program 1 times [2018-11-23 04:37:21,057 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:21,058 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:21,061 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:21,061 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:21,061 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:21,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:37:21,243 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:37:21,243 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:37:21,243 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 04:37:21,243 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 04:37:21,244 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 04:37:21,244 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:37:21,244 INFO L87 Difference]: Start difference. First operand 7009 states and 10173 transitions. Second operand 5 states. [2018-11-23 04:37:21,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:21,441 INFO L93 Difference]: Finished difference Result 10201 states and 14877 transitions. [2018-11-23 04:37:21,442 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 04:37:21,442 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 87 [2018-11-23 04:37:21,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:21,459 INFO L225 Difference]: With dead ends: 10201 [2018-11-23 04:37:21,459 INFO L226 Difference]: Without dead ends: 7008 [2018-11-23 04:37:21,468 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:37:21,473 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7008 states. [2018-11-23 04:37:21,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7008 to 7006. [2018-11-23 04:37:21,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7006 states. [2018-11-23 04:37:21,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7006 states to 7006 states and 10164 transitions. [2018-11-23 04:37:21,641 INFO L78 Accepts]: Start accepts. Automaton has 7006 states and 10164 transitions. Word has length 87 [2018-11-23 04:37:21,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:21,642 INFO L480 AbstractCegarLoop]: Abstraction has 7006 states and 10164 transitions. [2018-11-23 04:37:21,642 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 04:37:21,642 INFO L276 IsEmpty]: Start isEmpty. Operand 7006 states and 10164 transitions. [2018-11-23 04:37:21,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2018-11-23 04:37:21,643 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:21,643 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:21,643 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:21,643 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:21,644 INFO L82 PathProgramCache]: Analyzing trace with hash -2085603561, now seen corresponding path program 1 times [2018-11-23 04:37:21,644 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:21,644 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:21,646 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:21,646 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:21,646 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:21,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:37:21,719 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:37:21,719 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:37:21,720 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 04:37:21,720 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 04:37:21,720 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 04:37:21,720 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:37:21,720 INFO L87 Difference]: Start difference. First operand 7006 states and 10164 transitions. Second operand 5 states. [2018-11-23 04:37:21,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:21,865 INFO L93 Difference]: Finished difference Result 11910 states and 17291 transitions. [2018-11-23 04:37:21,865 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 04:37:21,865 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 91 [2018-11-23 04:37:21,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:21,876 INFO L225 Difference]: With dead ends: 11910 [2018-11-23 04:37:21,876 INFO L226 Difference]: Without dead ends: 4922 [2018-11-23 04:37:21,890 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 04:37:21,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4922 states. [2018-11-23 04:37:21,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4922 to 4671. [2018-11-23 04:37:21,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4671 states. [2018-11-23 04:37:22,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4671 states to 4671 states and 6491 transitions. [2018-11-23 04:37:22,007 INFO L78 Accepts]: Start accepts. Automaton has 4671 states and 6491 transitions. Word has length 91 [2018-11-23 04:37:22,007 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:22,007 INFO L480 AbstractCegarLoop]: Abstraction has 4671 states and 6491 transitions. [2018-11-23 04:37:22,008 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 04:37:22,008 INFO L276 IsEmpty]: Start isEmpty. Operand 4671 states and 6491 transitions. [2018-11-23 04:37:22,009 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2018-11-23 04:37:22,009 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:22,009 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:22,009 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:22,009 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:22,009 INFO L82 PathProgramCache]: Analyzing trace with hash 1031135745, now seen corresponding path program 1 times [2018-11-23 04:37:22,009 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:22,010 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:22,011 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:22,011 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:22,012 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:22,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:37:22,083 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:37:22,083 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:37:22,083 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 04:37:22,083 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 04:37:22,084 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 04:37:22,084 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:37:22,084 INFO L87 Difference]: Start difference. First operand 4671 states and 6491 transitions. Second operand 5 states. [2018-11-23 04:37:22,202 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:22,202 INFO L93 Difference]: Finished difference Result 8140 states and 11453 transitions. [2018-11-23 04:37:22,203 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 04:37:22,203 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 92 [2018-11-23 04:37:22,203 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:22,212 INFO L225 Difference]: With dead ends: 8140 [2018-11-23 04:37:22,213 INFO L226 Difference]: Without dead ends: 4727 [2018-11-23 04:37:22,218 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 04:37:22,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4727 states. [2018-11-23 04:37:22,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4727 to 4652. [2018-11-23 04:37:22,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4652 states. [2018-11-23 04:37:22,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4652 states to 4652 states and 6448 transitions. [2018-11-23 04:37:22,331 INFO L78 Accepts]: Start accepts. Automaton has 4652 states and 6448 transitions. Word has length 92 [2018-11-23 04:37:22,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:22,331 INFO L480 AbstractCegarLoop]: Abstraction has 4652 states and 6448 transitions. [2018-11-23 04:37:22,331 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 04:37:22,331 INFO L276 IsEmpty]: Start isEmpty. Operand 4652 states and 6448 transitions. [2018-11-23 04:37:22,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2018-11-23 04:37:22,333 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:22,333 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:22,333 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:22,333 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:22,333 INFO L82 PathProgramCache]: Analyzing trace with hash -62970969, now seen corresponding path program 1 times [2018-11-23 04:37:22,333 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:22,333 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:22,335 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:22,335 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:22,335 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:22,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 04:37:22,500 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 04:37:22,500 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 04:37:22,500 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 04:37:22,501 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 04:37:22,501 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 04:37:22,501 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:37:22,501 INFO L87 Difference]: Start difference. First operand 4652 states and 6448 transitions. Second operand 3 states. [2018-11-23 04:37:22,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 04:37:22,650 INFO L93 Difference]: Finished difference Result 7954 states and 11060 transitions. [2018-11-23 04:37:22,651 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 04:37:22,651 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 93 [2018-11-23 04:37:22,651 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 04:37:22,663 INFO L225 Difference]: With dead ends: 7954 [2018-11-23 04:37:22,663 INFO L226 Difference]: Without dead ends: 3928 [2018-11-23 04:37:22,671 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 04:37:22,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3928 states. [2018-11-23 04:37:22,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3928 to 3872. [2018-11-23 04:37:22,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3872 states. [2018-11-23 04:37:22,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3872 states to 3872 states and 5213 transitions. [2018-11-23 04:37:22,825 INFO L78 Accepts]: Start accepts. Automaton has 3872 states and 5213 transitions. Word has length 93 [2018-11-23 04:37:22,826 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 04:37:22,826 INFO L480 AbstractCegarLoop]: Abstraction has 3872 states and 5213 transitions. [2018-11-23 04:37:22,826 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 04:37:22,826 INFO L276 IsEmpty]: Start isEmpty. Operand 3872 states and 5213 transitions. [2018-11-23 04:37:22,827 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2018-11-23 04:37:22,828 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 04:37:22,828 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 04:37:22,828 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 04:37:22,828 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 04:37:22,828 INFO L82 PathProgramCache]: Analyzing trace with hash 282230124, now seen corresponding path program 1 times [2018-11-23 04:37:22,828 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 04:37:22,828 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 04:37:22,830 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:22,831 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 04:37:22,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 04:37:22,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 04:37:22,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 04:37:23,070 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=18446744073709551521, |#NULL.offset|=18446744073709551621, |#t~string12.base|=18446744073709551528, |#t~string12.offset|=18446744073709551622, |#t~string14.base|=18446744073709551516, |#t~string14.offset|=18446744073709551509, |#t~string195.base|=18446744073709551619, |#t~string195.offset|=18446744073709551561, |#t~string212.base|=18446744073709551510, |#t~string212.offset|=18446744073709551618, |#t~string220.base|=18446744073709551552, |#t~string220.offset|=18446744073709551628, |#t~string232.base|=18446744073709551584, |#t~string232.offset|=18446744073709551585, |#t~string257.base|=18446744073709551489, |#t~string257.offset|=18446744073709551607, |#t~string26.base|=18446744073709551570, |#t~string26.offset|=18446744073709551583, |#t~string262.base|=18446744073709551529, |#t~string262.offset|=18446744073709551551, |#t~string273.base|=18446744073709551605, |#t~string273.offset|=18446744073709551555, |#t~string276.base|=18446744073709551569, |#t~string276.offset|=18446744073709551553, |#t~string287.base|=18446744073709551565, |#t~string287.offset|=18446744073709551503, |#t~string295.base|=18446744073709551496, |#t~string295.offset|=18446744073709551536, |#t~string30.base|=18446744073709551603, |#t~string30.offset|=18446744073709551566, |#t~string305.base|=18446744073709551535, |#t~string305.offset|=18446744073709551526, |#t~string312.base|=18446744073709551523, |#t~string312.offset|=18446744073709551580, |#t~string317.base|=18446744073709551623, |#t~string317.offset|=18446744073709551602, |#t~string332.base|=18446744073709551598, |#t~string332.offset|=18446744073709551538, |#t~string345.base|=18446744073709551512, |#t~string345.offset|=18446744073709551589, |#t~string354.base|=18446744073709551514, |#t~string354.offset|=18446744073709551557, |#t~string360.base|=18446744073709551616, |#t~string360.offset|=18446744073709551546, |#t~string371.base|=18446744073709551591, |#t~string371.offset|=18446744073709551517, |#t~string389.base|=18446744073709551502, |#t~string389.offset|=18446744073709551558, |#t~string396.base|=18446744073709551542, |#t~string396.offset|=18446744073709551630, |#t~string400.base|=18446744073709551505, |#t~string400.offset|=18446744073709551599, |#t~string404.base|=18446744073709551497, |#t~string404.offset|=18446744073709551498, |#t~string408.base|=18446744073709551492, |#t~string408.offset|=18446744073709551626, |#t~string412.base|=18446744073709551541, |#t~string412.offset|=18446744073709551534, |#t~string421.base|=18446744073709551579, |#t~string421.offset|=18446744073709551537, |#t~string423.base|=18446744073709551573, |#t~string423.offset|=18446744073709551520, |#t~string426.base|=18446744073709551576, |#t~string426.offset|=18446744073709551563, |#t~string49.base|=18446744073709551600, |#t~string49.offset|=18446744073709551610, |#t~string54.base|=18446744073709551518, |#t~string54.offset|=18446744073709551575, |old(#NULL.base)|=18446744073709551521, |old(#NULL.offset)|=18446744073709551621, |old(#t~string12.base)|=18446744073709551528, |old(#t~string12.offset)|=18446744073709551622, |old(#t~string14.base)|=18446744073709551516, |old(#t~string14.offset)|=18446744073709551509, |old(#t~string195.base)|=18446744073709551619, |old(#t~string195.offset)|=18446744073709551561, |old(#t~string212.base)|=18446744073709551510, |old(#t~string212.offset)|=18446744073709551618, |old(#t~string220.base)|=18446744073709551552, |old(#t~string220.offset)|=18446744073709551628, |old(#t~string232.base)|=18446744073709551584, |old(#t~string232.offset)|=18446744073709551585, |old(#t~string257.base)|=18446744073709551489, |old(#t~string257.offset)|=18446744073709551607, |old(#t~string26.base)|=18446744073709551570, |old(#t~string26.offset)|=18446744073709551583, |old(#t~string262.base)|=18446744073709551529, |old(#t~string262.offset)|=18446744073709551551, |old(#t~string273.base)|=18446744073709551605, |old(#t~string273.offset)|=18446744073709551555, |old(#t~string276.base)|=18446744073709551569, |old(#t~string276.offset)|=18446744073709551553, |old(#t~string287.base)|=18446744073709551565, |old(#t~string287.offset)|=18446744073709551503, |old(#t~string295.base)|=18446744073709551496, |old(#t~string295.offset)|=18446744073709551536, |old(#t~string30.base)|=18446744073709551603, |old(#t~string30.offset)|=18446744073709551566, |old(#t~string305.base)|=18446744073709551535, |old(#t~string305.offset)|=18446744073709551526, |old(#t~string312.base)|=18446744073709551523, |old(#t~string312.offset)|=18446744073709551580, |old(#t~string317.base)|=18446744073709551623, |old(#t~string317.offset)|=18446744073709551602, |old(#t~string332.base)|=18446744073709551598, |old(#t~string332.offset)|=18446744073709551538, |old(#t~string345.base)|=18446744073709551512, |old(#t~string345.offset)|=18446744073709551589, |old(#t~string354.base)|=18446744073709551514, |old(#t~string354.offset)|=18446744073709551557, |old(#t~string360.base)|=18446744073709551616, |old(#t~string360.offset)|=18446744073709551546, |old(#t~string371.base)|=18446744073709551591, |old(#t~string371.offset)|=18446744073709551517, |old(#t~string389.base)|=18446744073709551502, |old(#t~string389.offset)|=18446744073709551558, |old(#t~string396.base)|=18446744073709551542, |old(#t~string396.offset)|=18446744073709551630, |old(#t~string400.base)|=18446744073709551505, |old(#t~string400.offset)|=18446744073709551599, |old(#t~string404.base)|=18446744073709551497, |old(#t~string404.offset)|=18446744073709551498, |old(#t~string408.base)|=18446744073709551492, |old(#t~string408.offset)|=18446744073709551626, |old(#t~string412.base)|=18446744073709551541, |old(#t~string412.offset)|=18446744073709551534, |old(#t~string421.base)|=18446744073709551579, |old(#t~string421.offset)|=18446744073709551537, |old(#t~string423.base)|=18446744073709551573, |old(#t~string423.offset)|=18446744073709551520, |old(#t~string426.base)|=18446744073709551576, |old(#t~string426.offset)|=18446744073709551563, |old(#t~string49.base)|=18446744073709551600, |old(#t~string49.offset)|=18446744073709551610, |old(#t~string54.base)|=18446744073709551518, |old(#t~string54.offset)|=18446744073709551575, |old(~#__key___7~0.base)|=18446744073709551504, |old(~#__key___7~0.offset)|=18446744073709551556, |old(~#__key___8~0.base)|=18446744073709551613, |old(~#__key___8~0.offset)|=18446744073709551562, |old(~#ems_usb_bittiming_const~0.base)|=18446744073709551595, |old(~#ems_usb_bittiming_const~0.offset)|=18446744073709551608, |old(~#ems_usb_driver~0.base)|=18446744073709551499, |old(~#ems_usb_driver~0.offset)|=18446744073709551531, |old(~#ems_usb_netdev_ops~0.base)|=18446744073709551545, |old(~#ems_usb_netdev_ops~0.offset)|=18446744073709551547, |old(~#ems_usb_table~0.base)|=18446744073709551593, |old(~#ems_usb_table~0.offset)|=18446744073709551524, |old(~ldv_coherent_state~0)|=18446744073709551488, |old(~LDV_IN_INTERRUPT~0)|=18446744073709551508, |old(~ldv_urb_state~0)|=18446744073709551560, |old(~res_ems_usb_close_12~0)|=18446744073709551612, |old(~res_ems_usb_open_10~0)|=18446744073709551615, |old(~res_ems_usb_probe_16~0)|=18446744073709551500, |~#__key___7~0.base|=18446744073709551504, |~#__key___7~0.offset|=18446744073709551556, |~#__key___8~0.base|=18446744073709551613, |~#__key___8~0.offset|=18446744073709551562, |~#ems_usb_bittiming_const~0.base|=18446744073709551595, |~#ems_usb_bittiming_const~0.offset|=18446744073709551608, |~#ems_usb_driver~0.base|=18446744073709551499, |~#ems_usb_driver~0.offset|=18446744073709551531, |~#ems_usb_netdev_ops~0.base|=18446744073709551545, |~#ems_usb_netdev_ops~0.offset|=18446744073709551547, |~#ems_usb_table~0.base|=18446744073709551593, |~#ems_usb_table~0.offset|=18446744073709551524, ~ldv_coherent_state~0=18446744073709551488, ~LDV_IN_INTERRUPT~0=18446744073709551508, ~ldv_urb_state~0=18446744073709551560, ~res_ems_usb_close_12~0=18446744073709551612, ~res_ems_usb_open_10~0=18446744073709551615, ~res_ems_usb_probe_16~0=18446744073709551500] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string12.base, #t~string12.offset := #Ultimate.alloc(26);call #t~string14.base, #t~string14.offset := #Ultimate.alloc(65);call #t~string26.base, #t~string26.offset := #Ultimate.alloc(8);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(24);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(34);call #t~string195.base, #t~string195.offset := #Ultimate.alloc(21);call #t~string212.base, #t~string212.offset := #Ultimate.alloc(14);call #t~string220.base, #t~string220.offset := #Ultimate.alloc(39);call #t~string232.base, #t~string232.offset := #Ultimate.alloc(21);call #t~string257.base, #t~string257.offset := #Ultimate.alloc(25);call #t~string262.base, #t~string262.offset := #Ultimate.alloc(31);call #t~string273.base, #t~string273.offset := #Ultimate.alloc(26);call #t~string276.base, #t~string276.offset := #Ultimate.alloc(28);call #t~string287.base, #t~string287.offset := #Ultimate.alloc(28);call #t~string295.base, #t~string295.offset := #Ultimate.alloc(29);call #t~string305.base, #t~string305.offset := #Ultimate.alloc(27);call #t~string312.base, #t~string312.offset := #Ultimate.alloc(25);call #t~string317.base, #t~string317.offset := #Ultimate.alloc(31);call #t~string332.base, #t~string332.offset := #Ultimate.alloc(28);call #t~string345.base, #t~string345.offset := #Ultimate.alloc(18);call #t~string354.base, #t~string354.offset := #Ultimate.alloc(21);call #t~string360.base, #t~string360.offset := #Ultimate.alloc(22);call #t~string371.base, #t~string371.offset := #Ultimate.alloc(33);call #t~string389.base, #t~string389.offset := #Ultimate.alloc(32);call #t~string396.base, #t~string396.offset := #Ultimate.alloc(25);call #t~string400.base, #t~string400.offset := #Ultimate.alloc(28);call #t~string404.base, #t~string404.offset := #Ultimate.alloc(26);call #t~string408.base, #t~string408.offset := #Ultimate.alloc(36);call #t~string412.base, #t~string412.offset := #Ultimate.alloc(34);call #t~string421.base, #t~string421.offset := #Ultimate.alloc(8);call #t~string423.base, #t~string423.offset := #Ultimate.alloc(33);call #t~string426.base, #t~string426.offset := #Ultimate.alloc(51);~__mod_author31~0 := ~__mod_author31~0[0 := 97];~__mod_author31~0 := ~__mod_author31~0[1 := 117];~__mod_author31~0 := ~__mod_author31~0[2 := 116];~__mod_author31~0 := ~__mod_author31~0[3 := 104];~__mod_author31~0 := ~__mod_author31~0[4 := 111];~__mod_author31~0 := ~__mod_author31~0[5 := 114];~__mod_author31~0 := ~__mod_author31~0[6 := 61];~__mod_author31~0 := ~__mod_author31~0[7 := 83];~__mod_author31~0 := ~__mod_author31~0[8 := 101];~__mod_author31~0 := ~__mod_author31~0[9 := 98];~__mod_author31~0 := ~__mod_author31~0[10 := 97];~__mod_author31~0 := ~__mod_author31~0[11 := 115];~__mod_author31~0 := ~__mod_author31~0[12 := 116];~__mod_author31~0 := ~__mod_author31~0[13 := 105];~__mod_author31~0 := ~__mod_author31~0[14 := 97];~__mod_author31~0 := ~__mod_author31~0[15 := 110];~__mod_author31~0 := ~__mod_author31~0[16 := 32];~__mod_author31~0 := ~__mod_author31~0[17 := 72];~__mod_author31~0 := ~__mod_author31~0[18 := 97];~__mod_author31~0 := ~__mod_author31~0[19 := 97];~__mod_author31~0 := ~__mod_author31~0[20 := 115];~__mod_author31~0 := ~__mod_author31~0[21 := 32];~__mod_author31~0 := ~__mod_author31~0[22 := 60];~__mod_author31~0 := ~__mod_author31~0[23 := 104];~__mod_author31~0 := ~__mod_author31~0[24 := 97];~__mod_author31~0 := ~__mod_author31~0[25 := 97];~__mod_author31~0 := ~__mod_author31~0[26 := 115];~__mod_author31~0 := ~__mod_author31~0[27 := 64];~__mod_author31~0 := ~__mod_author31~0[28 := 101];~__mod_author31~0 := ~__mod_author31~0[29 := 109];~__mod_author31~0 := ~__mod_author31~0[30 := 115];~__mod_author31~0 := ~__mod_author31~0[31 := 45];~__mod_author31~0 := ~__mod_author31~0[32 := 119];~__mod_author31~0 := ~__mod_author31~0[33 := 117];~__mod_author31~0 := ~__mod_author31~0[34 := 101];~__mod_author31~0 := ~__mod_author31~0[35 := 110];~__mod_author31~0 := ~__mod_author31~0[36 := 115];~__mod_author31~0 := ~__mod_author31~0[37 := 99];~__mod_author31~0 := ~__mod_author31~0[38 := 104];~__mod_author31~0 := ~__mod_author31~0[39 := 101];~__mod_author31~0 := ~__mod_author31~0[40 := 46];~__mod_author31~0 := ~__mod_author31~0[41 := 99];~__mod_author31~0 := ~__mod_author31~0[42 := 111];~__mod_author31~0 := ~__mod_author31~0[43 := 109];~__mod_author31~0 := ~__mod_author31~0[44 := 62];~__mod_author31~0 := ~__mod_author31~0[45 := 0];~__mod_description32~0 := ~__mod_description32~0[0 := 100];~__mod_description32~0 := ~__mod_description32~0[1 := 101];~__mod_description32~0 := ~__mod_description32~0[2 := 115];~__mod_description32~0 := ~__mod_description32~0[3 := 99];~__mod_description32~0 := ~__mod_description32~0[4 := 114];~__mod_description32~0 := ~__mod_description32~0[5 := 105];~__mod_description32~0 := ~__mod_description32~0[6 := 112];~__mod_description32~0 := ~__mod_description32~0[7 := 116];~__mod_description32~0 := ~__mod_description32~0[8 := 105];~__mod_description32~0 := ~__mod_description32~0[9 := 111];~__mod_description32~0 := ~__mod_description32~0[10 := 110];~__mod_description32~0 := ~__mod_description32~0[11 := 61];~__mod_description32~0 := ~__mod_description32~0[12 := 67];~__mod_description32~0 := ~__mod_description32~0[13 := 65];~__mod_description32~0 := ~__mod_description32~0[14 := 78];~__mod_description32~0 := ~__mod_description32~0[15 := 32];~__mod_description32~0 := ~__mod_description32~0[16 := 100];~__mod_description32~0 := ~__mod_description32~0[17 := 114];~__mod_description32~0 := ~__mod_description32~0[18 := 105];~__mod_description32~0 := ~__mod_description32~0[19 := 118];~__mod_description32~0 := ~__mod_description32~0[20 := 101];~__mod_description32~0 := ~__mod_description32~0[21 := 114];~__mod_description32~0 := ~__mod_description32~0[22 := 32];~__mod_description32~0 := ~__mod_description32~0[23 := 102];~__mod_description32~0 := ~__mod_description32~0[24 := 111];~__mod_description32~0 := ~__mod_description32~0[25 := 114];~__mod_description32~0 := ~__mod_description32~0[26 := 32];~__mod_description32~0 := ~__mod_description32~0[27 := 69];~__mod_description32~0 := ~__mod_description32~0[28 := 77];~__mod_description32~0 := ~__mod_description32~0[29 := 83];~__mod_description32~0 := ~__mod_description32~0[30 := 32];~__mod_description32~0 := ~__mod_description32~0[31 := 68];~__mod_description32~0 := ~__mod_description32~0[32 := 114];~__mod_description32~0 := ~__mod_description32~0[33 := 46];~__mod_description32~0 := ~__mod_description32~0[34 := 32];~__mod_description32~0 := ~__mod_description32~0[35 := 84];~__mod_description32~0 := ~__mod_description32~0[36 := 104];~__mod_description32~0 := ~__mod_description32~0[37 := 111];~__mod_description32~0 := ~__mod_description32~0[38 := 109];~__mod_description32~0 := ~__mod_description32~0[39 := 97];~__mod_description32~0 := ~__mod_description32~0[40 := 115];~__mod_description32~0 := ~__mod_description32~0[41 := 32];~__mod_description32~0 := ~__mod_description32~0[42 := 87];~__mod_description32~0 := ~__mod_description32~0[43 := 117];~__mod_description32~0 := ~__mod_description32~0[44 := 101];~__mod_description32~0 := ~__mod_description32~0[45 := 110];~__mod_description32~0 := ~__mod_description32~0[46 := 115];~__mod_description32~0 := ~__mod_description32~0[47 := 99];~__mod_description32~0 := ~__mod_description32~0[48 := 104];~__mod_description32~0 := ~__mod_description32~0[49 := 101];~__mod_description32~0 := ~__mod_description32~0[50 := 32];~__mod_description32~0 := ~__mod_description32~0[51 := 67];~__mod_description32~0 := ~__mod_description32~0[52 := 65];~__mod_description32~0 := ~__mod_description32~0[53 := 78];~__mod_description32~0 := ~__mod_description32~0[54 := 47];~__mod_description32~0 := ~__mod_description32~0[55 := 85];~__mod_description32~0 := ~__mod_description32~0[56 := 83];~__mod_description32~0 := ~__mod_description32~0[57 := 66];~__mod_description32~0 := ~__mod_description32~0[58 := 32];~__mod_description32~0 := ~__mod_description32~0[59 := 105];~__mod_description32~0 := ~__mod_description32~0[60 := 110];~__mod_description32~0 := ~__mod_description32~0[61 := 116];~__mod_description32~0 := ~__mod_description32~0[62 := 101];~__mod_description32~0 := ~__mod_description32~0[63 := 114];~__mod_description32~0 := ~__mod_description32~0[64 := 102];~__mod_description32~0 := ~__mod_description32~0[65 := 97];~__mod_description32~0 := ~__mod_description32~0[66 := 99];~__mod_description32~0 := ~__mod_description32~0[67 := 101];~__mod_description32~0 := ~__mod_description32~0[68 := 115];~__mod_description32~0 := ~__mod_description32~0[69 := 0];~__mod_license33~0 := ~__mod_license33~0[0 := 108];~__mod_license33~0 := ~__mod_license33~0[1 := 105];~__mod_license33~0 := ~__mod_license33~0[2 := 99];~__mod_license33~0 := ~__mod_license33~0[3 := 101];~__mod_license33~0 := ~__mod_license33~0[4 := 110];~__mod_license33~0 := ~__mod_license33~0[5 := 115];~__mod_license33~0 := ~__mod_license33~0[6 := 101];~__mod_license33~0 := ~__mod_license33~0[7 := 61];~__mod_license33~0 := ~__mod_license33~0[8 := 71];~__mod_license33~0 := ~__mod_license33~0[9 := 80];~__mod_license33~0 := ~__mod_license33~0[10 := 76];~__mod_license33~0 := ~__mod_license33~0[11 := 32];~__mod_license33~0 := ~__mod_license33~0[12 := 118];~__mod_license33~0 := ~__mod_license33~0[13 := 50];~__mod_license33~0 := ~__mod_license33~0[14 := 0];~LDV_IN_INTERRUPT~0 := 0;~res_ems_usb_open_10~0 := 0;~res_ems_usb_close_12~0 := 0;~res_ems_usb_probe_16~0 := 0;~ldv_urb_state~0 := 0;~ldv_coherent_state~0 := 0;call ~#__key___7~0.base, ~#__key___7~0.offset := #Ultimate.alloc(8);call write~init~int(0, ~#__key___7~0.base, ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 1 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 2 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 3 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 4 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 5 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 6 + ~#__key___7~0.offset, 1);call write~init~int(0, ~#__key___7~0.base, 7 + ~#__key___7~0.offset, 1);call ~#__key___8~0.base, ~#__key___8~0.offset := #Ultimate.alloc(8);call write~init~int(0, ~#__key___8~0.base, ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 1 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 2 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 3 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 4 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 5 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 6 + ~#__key___8~0.offset, 1);call write~init~int(0, ~#__key___8~0.base, 7 + ~#__key___8~0.offset, 1);call ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset := #Ultimate.alloc(24);call write~init~int(3, ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, 2);call write~init~int(4822, ~#ems_usb_table~0.base, 2 + ~#ems_usb_table~0.offset, 2);call write~init~int(1092, ~#ems_usb_table~0.base, 4 + ~#ems_usb_table~0.offset, 2);call write~init~int(0, ~#ems_usb_table~0.base, 6 + ~#ems_usb_table~0.offset, 2);call write~init~int(0, ~#ems_usb_table~0.base, 8 + ~#ems_usb_table~0.offset, 2);call write~init~int(0, ~#ems_usb_table~0.base, 10 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 11 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 12 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 13 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 14 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 15 + ~#ems_usb_table~0.offset, 1);call write~init~int(0, ~#ems_usb_table~0.base, 16 + ~#ems_usb_table~0.offset, 8);call ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset := #Ultimate.alloc(336);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 8 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_open.base, #funAddr~ems_usb_open.offset, ~#ems_usb_netdev_ops~0.base, 16 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_close.base, #funAddr~ems_usb_close.offset, ~#ems_usb_netdev_ops~0.base, 24 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_start_xmit.base, #funAddr~ems_usb_start_xmit.offset, ~#ems_usb_netdev_ops~0.base, 32 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 40 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 48 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 56 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 64 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 72 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 80 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 88 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 96 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 104 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 112 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 120 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 128 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 136 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 144 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 152 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 160 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 168 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 176 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 184 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 192 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 200 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 208 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 216 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 224 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 232 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 240 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 248 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 256 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 264 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 272 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 280 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 288 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 296 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 304 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 312 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 320 + ~#ems_usb_netdev_ops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 328 + ~#ems_usb_netdev_ops~0.offset, 8);call ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset := #Ultimate.alloc(48);call write~init~int(101, ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(109, ~#ems_usb_bittiming_const~0.base, 1 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 2 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(95, ~#ems_usb_bittiming_const~0.base, 3 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(117, ~#ems_usb_bittiming_const~0.base, 4 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 5 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(98, ~#ems_usb_bittiming_const~0.base, 6 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 7 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 8 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 9 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 10 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 11 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 12 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 13 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 14 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 15 + ~#ems_usb_bittiming_const~0.offset, 1);call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 16 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(16, ~#ems_usb_bittiming_const~0.base, 20 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 24 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(8, ~#ems_usb_bittiming_const~0.base, 28 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(4, ~#ems_usb_bittiming_const~0.base, 32 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 36 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(64, ~#ems_usb_bittiming_const~0.base, 40 + ~#ems_usb_bittiming_const~0.offset, 4);call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 44 + ~#ems_usb_bittiming_const~0.offset, 4);call ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset := #Ultimate.alloc(281);call write~init~$Pointer$(#t~string421.base, #t~string421.offset, ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_probe.base, #funAddr~ems_usb_probe.offset, ~#ems_usb_driver~0.base, 8 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ems_usb_disconnect.base, #funAddr~ems_usb_disconnect.offset, ~#ems_usb_driver~0.base, 16 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 24 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 32 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 40 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 48 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 56 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 64 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, ~#ems_usb_driver~0.base, 72 + ~#ems_usb_driver~0.offset, 8);call write~init~int(0, ~#ems_usb_driver~0.base, 80 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 84 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 88 + ~#ems_usb_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 92 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 100 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 108 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 116 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 124 + ~#ems_usb_driver~0.offset, 8);call write~init~int(0, ~#ems_usb_driver~0.base, 132 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 136 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 144 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 152 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 160 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 168 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 176 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 184 + ~#ems_usb_driver~0.offset, 8);call write~init~int(0, ~#ems_usb_driver~0.base, 192 + ~#ems_usb_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 193 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 201 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 209 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 217 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 225 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 233 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 241 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 249 + ~#ems_usb_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 257 + ~#ems_usb_driver~0.offset, 8);call write~init~int(0, ~#ems_usb_driver~0.base, 265 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 269 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 273 + ~#ems_usb_driver~0.offset, 4);call write~init~int(0, ~#ems_usb_driver~0.base, 277 + ~#ems_usb_driver~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(#NULL.base)|=18446744073709551521, |old(#NULL.offset)|=18446744073709551621, |old(#t~string12.base)|=18446744073709551528, |old(#t~string12.offset)|=18446744073709551622, |old(#t~string14.base)|=18446744073709551516, |old(#t~string14.offset)|=18446744073709551509, |old(#t~string195.base)|=18446744073709551619, |old(#t~string195.offset)|=18446744073709551561, |old(#t~string212.base)|=18446744073709551510, |old(#t~string212.offset)|=18446744073709551618, |old(#t~string220.base)|=18446744073709551552, |old(#t~string220.offset)|=18446744073709551628, |old(#t~string232.base)|=18446744073709551584, |old(#t~string232.offset)|=18446744073709551585, |old(#t~string257.base)|=18446744073709551489, |old(#t~string257.offset)|=18446744073709551607, |old(#t~string26.base)|=18446744073709551570, |old(#t~string26.offset)|=18446744073709551583, |old(#t~string262.base)|=18446744073709551529, |old(#t~string262.offset)|=18446744073709551551, |old(#t~string273.base)|=18446744073709551605, |old(#t~string273.offset)|=18446744073709551555, |old(#t~string276.base)|=18446744073709551569, |old(#t~string276.offset)|=18446744073709551553, |old(#t~string287.base)|=18446744073709551565, |old(#t~string287.offset)|=18446744073709551503, |old(#t~string295.base)|=18446744073709551496, |old(#t~string295.offset)|=18446744073709551536, |old(#t~string30.base)|=18446744073709551603, |old(#t~string30.offset)|=18446744073709551566, |old(#t~string305.base)|=18446744073709551535, |old(#t~string305.offset)|=18446744073709551526, |old(#t~string312.base)|=18446744073709551523, |old(#t~string312.offset)|=18446744073709551580, |old(#t~string317.base)|=18446744073709551623, |old(#t~string317.offset)|=18446744073709551602, |old(#t~string332.base)|=18446744073709551598, |old(#t~string332.offset)|=18446744073709551538, |old(#t~string345.base)|=18446744073709551512, |old(#t~string345.offset)|=18446744073709551589, |old(#t~string354.base)|=18446744073709551514, |old(#t~string354.offset)|=18446744073709551557, |old(#t~string360.base)|=18446744073709551616, |old(#t~string360.offset)|=18446744073709551546, |old(#t~string371.base)|=18446744073709551591, |old(#t~string371.offset)|=18446744073709551517, |old(#t~string389.base)|=18446744073709551502, |old(#t~string389.offset)|=18446744073709551558, |old(#t~string396.base)|=18446744073709551542, |old(#t~string396.offset)|=18446744073709551630, |old(#t~string400.base)|=18446744073709551505, |old(#t~string400.offset)|=18446744073709551599, |old(#t~string404.base)|=18446744073709551497, |old(#t~string404.offset)|=18446744073709551498, |old(#t~string408.base)|=18446744073709551492, |old(#t~string408.offset)|=18446744073709551626, |old(#t~string412.base)|=18446744073709551541, |old(#t~string412.offset)|=18446744073709551534, |old(#t~string421.base)|=18446744073709551579, |old(#t~string421.offset)|=18446744073709551537, |old(#t~string423.base)|=18446744073709551573, |old(#t~string423.offset)|=18446744073709551520, |old(#t~string426.base)|=18446744073709551576, |old(#t~string426.offset)|=18446744073709551563, |old(#t~string49.base)|=18446744073709551600, |old(#t~string49.offset)|=18446744073709551610, |old(#t~string54.base)|=18446744073709551518, |old(#t~string54.offset)|=18446744073709551575, |old(~#__key___7~0.base)|=18446744073709551504, |old(~#__key___7~0.offset)|=18446744073709551556, |old(~#__key___8~0.base)|=18446744073709551613, |old(~#__key___8~0.offset)|=18446744073709551562, |old(~#ems_usb_bittiming_const~0.base)|=18446744073709551595, |old(~#ems_usb_bittiming_const~0.offset)|=18446744073709551608, |old(~#ems_usb_driver~0.base)|=18446744073709551499, |old(~#ems_usb_driver~0.offset)|=18446744073709551531, |old(~#ems_usb_netdev_ops~0.base)|=18446744073709551545, |old(~#ems_usb_netdev_ops~0.offset)|=18446744073709551547, |old(~#ems_usb_table~0.base)|=18446744073709551593, |old(~#ems_usb_table~0.offset)|=18446744073709551524, |old(~ldv_coherent_state~0)|=18446744073709551488, |old(~LDV_IN_INTERRUPT~0)|=18446744073709551508, |old(~ldv_urb_state~0)|=18446744073709551560, |old(~res_ems_usb_close_12~0)|=18446744073709551612, |old(~res_ems_usb_open_10~0)|=18446744073709551615, |old(~res_ems_usb_probe_16~0)|=18446744073709551500, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(#NULL.base)|=18446744073709551521, |old(#NULL.offset)|=18446744073709551621, |old(#t~string12.base)|=18446744073709551528, |old(#t~string12.offset)|=18446744073709551622, |old(#t~string14.base)|=18446744073709551516, |old(#t~string14.offset)|=18446744073709551509, |old(#t~string195.base)|=18446744073709551619, |old(#t~string195.offset)|=18446744073709551561, |old(#t~string212.base)|=18446744073709551510, |old(#t~string212.offset)|=18446744073709551618, |old(#t~string220.base)|=18446744073709551552, |old(#t~string220.offset)|=18446744073709551628, |old(#t~string232.base)|=18446744073709551584, |old(#t~string232.offset)|=18446744073709551585, |old(#t~string257.base)|=18446744073709551489, |old(#t~string257.offset)|=18446744073709551607, |old(#t~string26.base)|=18446744073709551570, |old(#t~string26.offset)|=18446744073709551583, |old(#t~string262.base)|=18446744073709551529, |old(#t~string262.offset)|=18446744073709551551, |old(#t~string273.base)|=18446744073709551605, |old(#t~string273.offset)|=18446744073709551555, |old(#t~string276.base)|=18446744073709551569, |old(#t~string276.offset)|=18446744073709551553, |old(#t~string287.base)|=18446744073709551565, |old(#t~string287.offset)|=18446744073709551503, |old(#t~string295.base)|=18446744073709551496, |old(#t~string295.offset)|=18446744073709551536, |old(#t~string30.base)|=18446744073709551603, |old(#t~string30.offset)|=18446744073709551566, |old(#t~string305.base)|=18446744073709551535, |old(#t~string305.offset)|=18446744073709551526, |old(#t~string312.base)|=18446744073709551523, |old(#t~string312.offset)|=18446744073709551580, |old(#t~string317.base)|=18446744073709551623, |old(#t~string317.offset)|=18446744073709551602, |old(#t~string332.base)|=18446744073709551598, |old(#t~string332.offset)|=18446744073709551538, |old(#t~string345.base)|=18446744073709551512, |old(#t~string345.offset)|=18446744073709551589, |old(#t~string354.base)|=18446744073709551514, |old(#t~string354.offset)|=18446744073709551557, |old(#t~string360.base)|=18446744073709551616, |old(#t~string360.offset)|=18446744073709551546, |old(#t~string371.base)|=18446744073709551591, |old(#t~string371.offset)|=18446744073709551517, |old(#t~string389.base)|=18446744073709551502, |old(#t~string389.offset)|=18446744073709551558, |old(#t~string396.base)|=18446744073709551542, |old(#t~string396.offset)|=18446744073709551630, |old(#t~string400.base)|=18446744073709551505, |old(#t~string400.offset)|=18446744073709551599, |old(#t~string404.base)|=18446744073709551497, |old(#t~string404.offset)|=18446744073709551498, |old(#t~string408.base)|=18446744073709551492, |old(#t~string408.offset)|=18446744073709551626, |old(#t~string412.base)|=18446744073709551541, |old(#t~string412.offset)|=18446744073709551534, |old(#t~string421.base)|=18446744073709551579, |old(#t~string421.offset)|=18446744073709551537, |old(#t~string423.base)|=18446744073709551573, |old(#t~string423.offset)|=18446744073709551520, |old(#t~string426.base)|=18446744073709551576, |old(#t~string426.offset)|=18446744073709551563, |old(#t~string49.base)|=18446744073709551600, |old(#t~string49.offset)|=18446744073709551610, |old(#t~string54.base)|=18446744073709551518, |old(#t~string54.offset)|=18446744073709551575, |old(~#__key___7~0.base)|=18446744073709551504, |old(~#__key___7~0.offset)|=18446744073709551556, |old(~#__key___8~0.base)|=18446744073709551613, |old(~#__key___8~0.offset)|=18446744073709551562, |old(~#ems_usb_bittiming_const~0.base)|=18446744073709551595, |old(~#ems_usb_bittiming_const~0.offset)|=18446744073709551608, |old(~#ems_usb_driver~0.base)|=18446744073709551499, |old(~#ems_usb_driver~0.offset)|=18446744073709551531, |old(~#ems_usb_netdev_ops~0.base)|=18446744073709551545, |old(~#ems_usb_netdev_ops~0.offset)|=18446744073709551547, |old(~#ems_usb_table~0.base)|=18446744073709551593, |old(~#ems_usb_table~0.offset)|=18446744073709551524, |old(~ldv_coherent_state~0)|=18446744073709551488, |old(~LDV_IN_INTERRUPT~0)|=18446744073709551508, |old(~ldv_urb_state~0)|=18446744073709551560, |old(~res_ems_usb_close_12~0)|=18446744073709551612, |old(~res_ems_usb_open_10~0)|=18446744073709551615, |old(~res_ems_usb_probe_16~0)|=18446744073709551500, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #1005#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret437 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] havoc ~var_group1~0.base, ~var_group1~0.offset;havoc ~var_group2~0.base, ~var_group2~0.offset;havoc ~var_group3~0.base, ~var_group3~0.offset;havoc ~var_ems_usb_probe_16_p1~0.base, ~var_ems_usb_probe_16_p1~0.offset;havoc ~tmp___7~27;havoc ~ldv_s_ems_usb_netdev_ops_net_device_ops~0;havoc ~ldv_s_ems_usb_driver_usb_driver~0;havoc ~tmp___8~13;havoc ~tmp___9~5;~LDV_IN_INTERRUPT~0 := 1;call ldv_initialize(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret428 := ems_usb_init(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] havoc ~err~5;havoc #t~nondet422; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret424 := usb_register(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_register_#in~driver.base|=18446744073709551548, |usb_register_#in~driver.offset|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~driver.base, ~driver.offset := #in~driver.base, #in~driver.offset;havoc ~tmp___7~9;call #t~ret27 := usb_register_driver(~driver.base, ~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string26.base, #t~string26.offset);assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647;~tmp___7~9 := #t~ret27;havoc #t~ret27;#res := ~tmp___7~9; VAL [usb_register_~driver.base=18446744073709551548, usb_register_~driver.offset=0, usb_register_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_register_#in~driver.base|=18446744073709551548, |usb_register_#in~driver.offset|=0, |usb_register_#res|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [usb_register_~driver.base=18446744073709551548, usb_register_~driver.offset=0, usb_register_~tmp___7~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_register_#in~driver.base|=18446744073709551548, |usb_register_#in~driver.offset|=0, |usb_register_#res|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #899#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_init_#t~ret424|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647;~err~5 := #t~ret424;havoc #t~ret424; VAL [ems_usb_init_~err~5=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 != ~err~5);#res := 0; VAL [ems_usb_init_~err~5=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_init_#res|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [ems_usb_init_~err~5=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_init_#res|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #901#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |main_#t~ret428|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume -2147483648 <= #t~ret428 && #t~ret428 <= 2147483647;~tmp___7~27 := #t~ret428;havoc #t~ret428; VAL [main_~tmp___7~27=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 != ~tmp___7~27);~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0;~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647;~tmp___9~5 := #t~nondet429;havoc #t~nondet429; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume 0 != ~tmp___9~5; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___9~5=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume -2147483648 <= #t~nondet430 && #t~nondet430 <= 2147483647;~tmp___8~13 := #t~nondet430;havoc #t~nondet430; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 == ~tmp___8~13); VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(1 == ~tmp___8~13); VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume 2 == ~tmp___8~13; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret433 := ems_usb_start_xmit(~var_group2~0.base, ~var_group2~0.offset, ~var_group1~0.base, ~var_group1~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~skb.base, ~skb.offset := #in~skb.base, #in~skb.offset;~netdev.base, ~netdev.offset := #in~netdev.base, #in~netdev.offset;havoc ~dev~4.base, ~dev~4.offset;havoc ~tmp___7~20.base, ~tmp___7~20.offset;havoc ~context~1.base, ~context~1.offset;havoc ~stats~2.base, ~stats~2.offset;havoc ~cf~3.base, ~cf~3.offset;havoc ~msg~1.base, ~msg~1.offset;havoc ~urb~1.base, ~urb~1.offset;havoc ~buf~1.base, ~buf~1.offset;havoc ~i~3;havoc ~err~3;havoc ~size~0;havoc ~tmp___8~8;havoc ~tmp___9~2.base, ~tmp___9~2.offset;havoc ~tmp___10~0;havoc ~tmp___11~0;havoc ~tmp___12~0; VAL [ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret306.base, #t~ret306.offset := netdev_priv(~netdev.base, ~netdev.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |netdev_priv_#in~dev.base|=0, |netdev_priv_#in~dev.offset|=(- 520), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;#res.base, #res.offset := ~dev.base, ~dev.offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); VAL [netdev_priv_~dev.base=0, netdev_priv_~dev.offset=(- 520), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |netdev_priv_#in~dev.base|=0, |netdev_priv_#in~dev.offset|=(- 520), |netdev_priv_#res.base|=0, |netdev_priv_#res.offset|=(- 520), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [netdev_priv_~dev.base=0, netdev_priv_~dev.offset=(- 520), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |netdev_priv_#in~dev.base|=0, |netdev_priv_#in~dev.offset|=(- 520), |netdev_priv_#res.base|=0, |netdev_priv_#res.offset|=(- 520), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #869#return; VAL [ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~ret306.base|=0, |ems_usb_start_xmit_#t~ret306.offset|=(- 520), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~tmp___7~20.base, ~tmp___7~20.offset := #t~ret306.base, #t~ret306.offset;havoc #t~ret306.base, #t~ret306.offset;~dev~4.base, ~dev~4.offset := ~tmp___7~20.base, ~tmp___7~20.offset;~context~1.base, ~context~1.offset := 0, 0;~stats~2.base, ~stats~2.offset := ~netdev.base, 188 + ~netdev.offset;call #t~mem307.base, #t~mem307.offset := read~$Pointer$(~skb.base, 226 + ~skb.offset, 8);~cf~3.base, ~cf~3.offset := #t~mem307.base, #t~mem307.offset;havoc #t~mem307.base, #t~mem307.offset;~size~0 := 28; VAL [ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret308 := can_dropped_invalid_skb(~netdev.base, ~netdev.offset, ~skb.base, ~skb.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |can_dropped_invalid_skb_#in~dev.base|=0, |can_dropped_invalid_skb_#in~dev.offset|=(- 520), |can_dropped_invalid_skb_#in~skb.base|=18446744073709551627, |can_dropped_invalid_skb_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~skb.base, ~skb.offset := #in~skb.base, #in~skb.offset;havoc ~cf~0.base, ~cf~0.offset;havoc ~tmp___7~10;havoc ~tmp___8~3;call #t~mem34.base, #t~mem34.offset := read~$Pointer$(~skb.base, 226 + ~skb.offset, 8);~cf~0.base, ~cf~0.offset := #t~mem34.base, #t~mem34.offset;havoc #t~mem34.base, #t~mem34.offset;call #t~mem35 := read~int(~skb.base, 104 + ~skb.offset, 4); VAL [can_dropped_invalid_skb_~cf~0.base=18446744073709551614, can_dropped_invalid_skb_~cf~0.offset=0, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=(- 520), can_dropped_invalid_skb_~skb.base=18446744073709551627, can_dropped_invalid_skb_~skb.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |can_dropped_invalid_skb_#in~dev.base|=0, |can_dropped_invalid_skb_#in~dev.offset|=(- 520), |can_dropped_invalid_skb_#in~skb.base|=18446744073709551627, |can_dropped_invalid_skb_#in~skb.offset|=0, |can_dropped_invalid_skb_#t~mem35|=4294967309, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(13 != #t~mem35 % 4294967296 % 18446744073709551616);havoc #t~mem35;call #t~mem36 := read~int(~cf~0.base, 4 + ~cf~0.offset, 1); VAL [can_dropped_invalid_skb_~cf~0.base=18446744073709551614, can_dropped_invalid_skb_~cf~0.offset=0, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=(- 520), can_dropped_invalid_skb_~skb.base=18446744073709551627, can_dropped_invalid_skb_~skb.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |can_dropped_invalid_skb_#in~dev.base|=0, |can_dropped_invalid_skb_#in~dev.offset|=(- 520), |can_dropped_invalid_skb_#in~skb.base|=18446744073709551627, |can_dropped_invalid_skb_#in~skb.offset|=0, |can_dropped_invalid_skb_#t~mem36|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(#t~mem36 % 256 > 8);havoc #t~mem36;~tmp___7~10 := 0; VAL [can_dropped_invalid_skb_~cf~0.base=18446744073709551614, can_dropped_invalid_skb_~cf~0.offset=0, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=(- 520), can_dropped_invalid_skb_~skb.base=18446744073709551627, can_dropped_invalid_skb_~skb.offset=0, can_dropped_invalid_skb_~tmp___7~10=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |can_dropped_invalid_skb_#in~dev.base|=0, |can_dropped_invalid_skb_#in~dev.offset|=(- 520), |can_dropped_invalid_skb_#in~skb.base|=18446744073709551627, |can_dropped_invalid_skb_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~tmp___8~3 := ~tmp___7~10; VAL [can_dropped_invalid_skb_~cf~0.base=18446744073709551614, can_dropped_invalid_skb_~cf~0.offset=0, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=(- 520), can_dropped_invalid_skb_~skb.base=18446744073709551627, can_dropped_invalid_skb_~skb.offset=0, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |can_dropped_invalid_skb_#in~dev.base|=0, |can_dropped_invalid_skb_#in~dev.offset|=(- 520), |can_dropped_invalid_skb_#in~skb.base|=18446744073709551627, |can_dropped_invalid_skb_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 != ~tmp___8~3);#res := 0; VAL [can_dropped_invalid_skb_~cf~0.base=18446744073709551614, can_dropped_invalid_skb_~cf~0.offset=0, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=(- 520), can_dropped_invalid_skb_~skb.base=18446744073709551627, can_dropped_invalid_skb_~skb.offset=0, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |can_dropped_invalid_skb_#in~dev.base|=0, |can_dropped_invalid_skb_#in~dev.offset|=(- 520), |can_dropped_invalid_skb_#in~skb.base|=18446744073709551627, |can_dropped_invalid_skb_#in~skb.offset|=0, |can_dropped_invalid_skb_#res|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [can_dropped_invalid_skb_~cf~0.base=18446744073709551614, can_dropped_invalid_skb_~cf~0.offset=0, can_dropped_invalid_skb_~dev.base=0, can_dropped_invalid_skb_~dev.offset=(- 520), can_dropped_invalid_skb_~skb.base=18446744073709551627, can_dropped_invalid_skb_~skb.offset=0, can_dropped_invalid_skb_~tmp___7~10=0, can_dropped_invalid_skb_~tmp___8~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |can_dropped_invalid_skb_#in~dev.base|=0, |can_dropped_invalid_skb_#in~dev.offset|=(- 520), |can_dropped_invalid_skb_#in~skb.base|=18446744073709551627, |can_dropped_invalid_skb_#in~skb.offset|=0, |can_dropped_invalid_skb_#res|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #871#return; VAL [ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~ret308|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume -2147483648 <= #t~ret308 && #t~ret308 <= 2147483647;~tmp___8~8 := #t~ret308;havoc #t~ret308; VAL [ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 != ~tmp___8~8); VAL [ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret309.base, #t~ret309.offset := usb_alloc_urb(0, 32); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=32, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~iso_packets := #in~iso_packets;~mem_flags := #in~mem_flags;havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset;havoc ~tmp___7~29.base, ~tmp___7~29.offset; VAL [usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=32, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=32, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=32, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=32, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] call #t~ret436.base, #t~ret436.offset := ldv_undefined_pointer();~tmp___7~29.base, ~tmp___7~29.offset := #t~ret436.base, #t~ret436.offset;havoc #t~ret436.base, #t~ret436.offset;~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~29.base, ~tmp___7~29.offset; VAL [usb_alloc_urb_~arbitrary_memory~1.base=18446744073709551609, usb_alloc_urb_~arbitrary_memory~1.offset=(- 104), usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=32, usb_alloc_urb_~tmp___7~29.base=18446744073709551609, usb_alloc_urb_~tmp___7~29.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=32, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0);~ldv_urb_state~0 := 1 + ~ldv_urb_state~0;#res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; VAL [usb_alloc_urb_~arbitrary_memory~1.base=18446744073709551609, usb_alloc_urb_~arbitrary_memory~1.offset=(- 104), usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=32, usb_alloc_urb_~tmp___7~29.base=18446744073709551609, usb_alloc_urb_~tmp___7~29.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=32, |usb_alloc_urb_#res.base|=18446744073709551609, |usb_alloc_urb_#res.offset|=(- 104), |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [usb_alloc_urb_~arbitrary_memory~1.base=18446744073709551609, usb_alloc_urb_~arbitrary_memory~1.offset=(- 104), usb_alloc_urb_~iso_packets=0, usb_alloc_urb_~mem_flags=32, usb_alloc_urb_~tmp___7~29.base=18446744073709551609, usb_alloc_urb_~tmp___7~29.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_urb_#in~iso_packets|=0, |usb_alloc_urb_#in~mem_flags|=32, |usb_alloc_urb_#res.base|=18446744073709551609, |usb_alloc_urb_#res.offset|=(- 104), |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #873#return; VAL [ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~ret309.base|=18446744073709551609, |ems_usb_start_xmit_#t~ret309.offset|=(- 104), |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~urb~1.base, ~urb~1.offset := #t~ret309.base, #t~ret309.offset;havoc #t~ret309.base, #t~ret309.offset; VAL [ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(~urb~1.base == 0 && ~urb~1.offset == 0);call #t~mem313.base, #t~mem313.offset := read~$Pointer$(~dev~4.base, 336 + ~dev~4.offset, 8); VAL [ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~mem313.base|=18446744073709551544, |ems_usb_start_xmit_#t~mem313.offset|=18446744073709551588, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret314.base, #t~ret314.offset := usb_alloc_coherent(#t~mem313.base, #t~mem313.offset, ~size~0, 32, ~urb~1.base, 104 + ~urb~1.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_coherent_#in~dev.base|=18446744073709551544, |usb_alloc_coherent_#in~dev.offset|=18446744073709551588, |usb_alloc_coherent_#in~dma.base|=18446744073709551609, |usb_alloc_coherent_#in~dma.offset|=0, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~size := #in~size;~mem_flags := #in~mem_flags;~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset;havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset;havoc ~tmp___7~28.base, ~tmp___7~28.offset; VAL [usb_alloc_coherent_~dev.base=18446744073709551544, usb_alloc_coherent_~dev.offset=18446744073709551588, usb_alloc_coherent_~dma.base=18446744073709551609, usb_alloc_coherent_~dma.offset=0, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_coherent_#in~dev.base|=18446744073709551544, |usb_alloc_coherent_#in~dev.offset|=18446744073709551588, |usb_alloc_coherent_#in~dma.base|=18446744073709551609, |usb_alloc_coherent_#in~dma.offset|=0, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [usb_alloc_coherent_~dev.base=18446744073709551544, usb_alloc_coherent_~dev.offset=18446744073709551588, usb_alloc_coherent_~dma.base=18446744073709551609, usb_alloc_coherent_~dma.offset=0, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_coherent_#in~dev.base|=18446744073709551544, |usb_alloc_coherent_#in~dev.offset|=18446744073709551588, |usb_alloc_coherent_#in~dma.base|=18446744073709551609, |usb_alloc_coherent_#in~dma.offset|=0, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] call #t~ret435.base, #t~ret435.offset := ldv_undefined_pointer();~tmp___7~28.base, ~tmp___7~28.offset := #t~ret435.base, #t~ret435.offset;havoc #t~ret435.base, #t~ret435.offset;~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~28.base, ~tmp___7~28.offset; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=18446744073709551487, usb_alloc_coherent_~arbitrary_memory~0.offset=130, usb_alloc_coherent_~dev.base=18446744073709551544, usb_alloc_coherent_~dev.offset=18446744073709551588, usb_alloc_coherent_~dma.base=18446744073709551609, usb_alloc_coherent_~dma.offset=0, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=28, usb_alloc_coherent_~tmp___7~28.base=18446744073709551487, usb_alloc_coherent_~tmp___7~28.offset=130, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_coherent_#in~dev.base|=18446744073709551544, |usb_alloc_coherent_#in~dev.offset|=18446744073709551588, |usb_alloc_coherent_#in~dma.base|=18446744073709551609, |usb_alloc_coherent_#in~dma.offset|=0, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0);~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0;#res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=18446744073709551487, usb_alloc_coherent_~arbitrary_memory~0.offset=130, usb_alloc_coherent_~dev.base=18446744073709551544, usb_alloc_coherent_~dev.offset=18446744073709551588, usb_alloc_coherent_~dma.base=18446744073709551609, usb_alloc_coherent_~dma.offset=0, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=28, usb_alloc_coherent_~tmp___7~28.base=18446744073709551487, usb_alloc_coherent_~tmp___7~28.offset=130, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_coherent_#in~dev.base|=18446744073709551544, |usb_alloc_coherent_#in~dev.offset|=18446744073709551588, |usb_alloc_coherent_#in~dma.base|=18446744073709551609, |usb_alloc_coherent_#in~dma.offset|=0, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=28, |usb_alloc_coherent_#res.base|=18446744073709551487, |usb_alloc_coherent_#res.offset|=130, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [usb_alloc_coherent_~arbitrary_memory~0.base=18446744073709551487, usb_alloc_coherent_~arbitrary_memory~0.offset=130, usb_alloc_coherent_~dev.base=18446744073709551544, usb_alloc_coherent_~dev.offset=18446744073709551588, usb_alloc_coherent_~dma.base=18446744073709551609, usb_alloc_coherent_~dma.offset=0, usb_alloc_coherent_~mem_flags=32, usb_alloc_coherent_~size=28, usb_alloc_coherent_~tmp___7~28.base=18446744073709551487, usb_alloc_coherent_~tmp___7~28.offset=130, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_alloc_coherent_#in~dev.base|=18446744073709551544, |usb_alloc_coherent_#in~dev.offset|=18446744073709551588, |usb_alloc_coherent_#in~dma.base|=18446744073709551609, |usb_alloc_coherent_#in~dma.offset|=0, |usb_alloc_coherent_#in~mem_flags|=32, |usb_alloc_coherent_#in~size|=28, |usb_alloc_coherent_#res.base|=18446744073709551487, |usb_alloc_coherent_#res.offset|=130, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #875#return; VAL [ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~mem313.base|=18446744073709551544, |ems_usb_start_xmit_#t~mem313.offset|=18446744073709551588, |ems_usb_start_xmit_#t~ret314.base|=18446744073709551487, |ems_usb_start_xmit_#t~ret314.offset|=130, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~tmp___9~2.base, ~tmp___9~2.offset := #t~ret314.base, #t~ret314.offset;havoc #t~ret314.base, #t~ret314.offset;havoc #t~mem313.base, #t~mem313.offset;~buf~1.base, ~buf~1.offset := ~tmp___9~2.base, ~tmp___9~2.offset; VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(~buf~1.base == 0 && ~buf~1.offset == 0);~msg~1.base, ~msg~1.offset := ~buf~1.base, 4 + ~buf~1.offset;call #t~mem318 := read~int(~cf~3.base, ~cf~3.offset, 4);call write~int(~bitwiseAnd(#t~mem318, 536870911), ~msg~1.base, 11 + ~msg~1.offset, 4);havoc #t~mem318;call #t~mem319 := read~int(~cf~3.base, 4 + ~cf~3.offset, 1);call write~int(#t~mem319, ~msg~1.base, 15 + ~msg~1.offset, 1);havoc #t~mem319;call #t~mem320 := read~int(~cf~3.base, ~cf~3.offset, 4); VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~mem320|=18446744073709551567, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume 0 != ~bitwiseAnd(#t~mem320, 1073741824) % 4294967296;havoc #t~mem320;call #t~mem321 := read~int(~cf~3.base, ~cf~3.offset, 4); VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~mem321|=18446744073709551567, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume 0 != ~bitwiseAnd(#t~mem321, 2147483648) % 4294967296;havoc #t~mem321;call write~int(16, ~msg~1.base, ~msg~1.offset, 1); VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] call write~int(5, ~msg~1.base, 1 + ~msg~1.offset, 1); VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] call #t~mem326 := read~int(~msg~1.base, 11 + ~msg~1.offset, 4);call write~int(#t~mem326, ~msg~1.base, 11 + ~msg~1.offset, 4);havoc #t~mem326;~i~3 := 0; VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume ~i~3 < 10; VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] call #t~mem327 := read~int(~dev~4.base, 8 + (520 + ~dev~4.offset + 13 * ~i~3), 4); VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~mem327|=4294967306, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume 10 == #t~mem327 % 4294967296;havoc #t~mem327;~context~1.base, ~context~1.offset := ~dev~4.base, 520 + ~dev~4.offset + 13 * ~i~3; VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume ~context~1.base == 0 && ~context~1.offset == 0;call usb_unanchor_urb(~urb~1.base, ~urb~1.offset);call #t~mem328.base, #t~mem328.offset := read~$Pointer$(~dev~4.base, 336 + ~dev~4.offset, 8);call #t~mem329 := read~int(~urb~1.base, 104 + ~urb~1.offset, 8); VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~mem328.base|=18446744073709551544, |ems_usb_start_xmit_#t~mem328.offset|=18446744073709551588, |ems_usb_start_xmit_#t~mem329|=18446744073709551629, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call usb_free_coherent(#t~mem328.base, #t~mem328.offset, ~size~0, ~buf~1.base, ~buf~1.offset, #t~mem329); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_free_coherent_#in~addr.base|=18446744073709551487, |usb_free_coherent_#in~addr.offset|=130, |usb_free_coherent_#in~dev.base|=18446744073709551544, |usb_free_coherent_#in~dev.offset|=18446744073709551588, |usb_free_coherent_#in~dma|=18446744073709551629, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset;~size := #in~size;~addr.base, ~addr.offset := #in~addr.base, #in~addr.offset;~dma := #in~dma; VAL [usb_free_coherent_~addr.base=18446744073709551487, usb_free_coherent_~addr.offset=130, usb_free_coherent_~dev.base=18446744073709551544, usb_free_coherent_~dev.offset=18446744073709551588, usb_free_coherent_~dma=18446744073709551629, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_free_coherent_#in~addr.base|=18446744073709551487, |usb_free_coherent_#in~addr.offset|=130, |usb_free_coherent_#in~dev.base|=18446744073709551544, |usb_free_coherent_#in~dev.offset|=18446744073709551588, |usb_free_coherent_#in~dma|=18446744073709551629, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [usb_free_coherent_~addr.base=18446744073709551487, usb_free_coherent_~addr.offset=130, usb_free_coherent_~dev.base=18446744073709551544, usb_free_coherent_~dev.offset=18446744073709551588, usb_free_coherent_~dma=18446744073709551629, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_free_coherent_#in~addr.base|=18446744073709551487, |usb_free_coherent_#in~addr.offset|=130, |usb_free_coherent_#in~dev.base|=18446744073709551544, |usb_free_coherent_#in~dev.offset|=18446744073709551588, |usb_free_coherent_#in~dma|=18446744073709551629, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !!(0 != (~addr.base + ~addr.offset) % 18446744073709551616); VAL [usb_free_coherent_~addr.base=18446744073709551487, usb_free_coherent_~addr.offset=130, usb_free_coherent_~dev.base=18446744073709551544, usb_free_coherent_~dev.offset=18446744073709551588, usb_free_coherent_~dma=18446744073709551629, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_free_coherent_#in~addr.base|=18446744073709551487, |usb_free_coherent_#in~addr.offset|=130, |usb_free_coherent_#in~dev.base|=18446744073709551544, |usb_free_coherent_#in~dev.offset|=18446744073709551588, |usb_free_coherent_#in~dma|=18446744073709551629, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume ~addr.base != 0 || ~addr.offset != 0; VAL [usb_free_coherent_~addr.base=18446744073709551487, usb_free_coherent_~addr.offset=130, usb_free_coherent_~dev.base=18446744073709551544, usb_free_coherent_~dev.offset=18446744073709551588, usb_free_coherent_~dma=18446744073709551629, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_free_coherent_#in~addr.base|=18446744073709551487, |usb_free_coherent_#in~addr.offset|=130, |usb_free_coherent_#in~dev.base|=18446744073709551544, |usb_free_coherent_#in~dev.offset|=18446744073709551588, |usb_free_coherent_#in~dma|=18446744073709551629, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume ~ldv_coherent_state~0 >= 1; VAL [usb_free_coherent_~addr.base=18446744073709551487, usb_free_coherent_~addr.offset=130, usb_free_coherent_~dev.base=18446744073709551544, usb_free_coherent_~dev.offset=18446744073709551588, usb_free_coherent_~dma=18446744073709551629, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_free_coherent_#in~addr.base|=18446744073709551487, |usb_free_coherent_#in~addr.offset|=130, |usb_free_coherent_#in~dev.base|=18446744073709551544, |usb_free_coherent_#in~dev.offset|=18446744073709551588, |usb_free_coherent_#in~dma|=18446744073709551629, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [usb_free_coherent_~addr.base=18446744073709551487, usb_free_coherent_~addr.offset=130, usb_free_coherent_~dev.base=18446744073709551544, usb_free_coherent_~dev.offset=18446744073709551588, usb_free_coherent_~dma=18446744073709551629, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_free_coherent_#in~addr.base|=18446744073709551487, |usb_free_coherent_#in~addr.offset|=130, |usb_free_coherent_#in~dev.base|=18446744073709551544, |usb_free_coherent_#in~dev.offset|=18446744073709551588, |usb_free_coherent_#in~dma|=18446744073709551629, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [usb_free_coherent_~addr.base=18446744073709551487, usb_free_coherent_~addr.offset=130, usb_free_coherent_~dev.base=18446744073709551544, usb_free_coherent_~dev.offset=18446744073709551588, usb_free_coherent_~dma=18446744073709551629, usb_free_coherent_~size=28, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=1, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |usb_free_coherent_#in~addr.base|=18446744073709551487, |usb_free_coherent_#in~addr.offset|=130, |usb_free_coherent_#in~dev.base|=18446744073709551544, |usb_free_coherent_#in~dev.offset|=18446744073709551588, |usb_free_coherent_#in~dma|=18446744073709551629, |usb_free_coherent_#in~size|=28, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #879#return; VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#t~mem328.base|=18446744073709551544, |ems_usb_start_xmit_#t~mem328.offset|=18446744073709551588, |ems_usb_start_xmit_#t~mem329|=18446744073709551629, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] havoc #t~mem329;havoc #t~mem328.base, #t~mem328.offset;havoc #t~nondet330;call #t~mem331.base, #t~mem331.offset := read~$Pointer$(~netdev.base, 1149 + ~netdev.offset, 8);havoc #t~mem331.base, #t~mem331.offset;#res := 16; VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#res|=16, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [ems_usb_start_xmit_~buf~1.base=18446744073709551487, ems_usb_start_xmit_~buf~1.offset=130, ems_usb_start_xmit_~cf~3.base=18446744073709551614, ems_usb_start_xmit_~cf~3.offset=0, ems_usb_start_xmit_~context~1.base=0, ems_usb_start_xmit_~context~1.offset=0, ems_usb_start_xmit_~dev~4.base=0, ems_usb_start_xmit_~dev~4.offset=(- 520), ems_usb_start_xmit_~i~3=0, ems_usb_start_xmit_~msg~1.base=18446744073709551487, ems_usb_start_xmit_~msg~1.offset=134, ems_usb_start_xmit_~netdev.base=0, ems_usb_start_xmit_~netdev.offset=(- 520), ems_usb_start_xmit_~size~0=28, ems_usb_start_xmit_~skb.base=18446744073709551627, ems_usb_start_xmit_~skb.offset=0, ems_usb_start_xmit_~stats~2.base=0, ems_usb_start_xmit_~stats~2.offset=(- 332), ems_usb_start_xmit_~tmp___7~20.base=0, ems_usb_start_xmit_~tmp___7~20.offset=(- 520), ems_usb_start_xmit_~tmp___8~8=0, ems_usb_start_xmit_~tmp___9~2.base=18446744073709551487, ems_usb_start_xmit_~tmp___9~2.offset=130, ems_usb_start_xmit_~urb~1.base=18446744073709551609, ems_usb_start_xmit_~urb~1.offset=(- 104), |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |ems_usb_start_xmit_#in~netdev.base|=0, |ems_usb_start_xmit_#in~netdev.offset|=(- 520), |ems_usb_start_xmit_#in~skb.base|=18446744073709551627, |ems_usb_start_xmit_#in~skb.offset|=0, |ems_usb_start_xmit_#res|=16, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #907#return; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=1, main_~var_group1~0.base=0, main_~var_group1~0.offset=(- 520), main_~var_group2~0.base=18446744073709551627, main_~var_group2~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |main_#t~ret433|=16, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume -2147483648 <= #t~ret433 && #t~ret433 <= 2147483647;havoc #t~ret433; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=1, main_~var_group1~0.base=0, main_~var_group1~0.offset=(- 520), main_~var_group2~0.base=18446744073709551627, main_~var_group2~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=1, main_~var_group1~0.base=0, main_~var_group1~0.offset=(- 520), main_~var_group2~0.base=18446744073709551627, main_~var_group2~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647;~tmp___9~5 := #t~nondet429;havoc #t~nondet429; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=(- 520), main_~var_group2~0.base=18446744073709551627, main_~var_group2~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 != ~tmp___9~5); VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=(- 520), main_~var_group2~0.base=18446744073709551627, main_~var_group2~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !!(0 == ~ldv_s_ems_usb_netdev_ops_net_device_ops~0); VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=(- 520), main_~var_group2~0.base=18446744073709551627, main_~var_group2~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !!(0 == ~ldv_s_ems_usb_driver_usb_driver~0); VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=(- 520), main_~var_group2~0.base=18446744073709551627, main_~var_group2~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ems_usb_exit(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] call usb_deregister(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET #913#return; VAL [main_~ldv_s_ems_usb_driver_usb_driver~0=0, main_~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, main_~tmp___7~27=0, main_~tmp___8~13=2, main_~tmp___9~5=0, main_~var_group1~0.base=0, main_~var_group1~0.offset=(- 520), main_~var_group2~0.base=18446744073709551627, main_~var_group2~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ldv_check_final_state(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !(0 == ~ldv_urb_state~0); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ldv_blast_assert(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] assume !false; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string12.base|=18446744073709551527, |#t~string12.offset|=0, |#t~string14.base|=18446744073709551532, |#t~string14.offset|=0, |#t~string195.base|=18446744073709551617, |#t~string195.offset|=0, |#t~string212.base|=18446744073709551511, |#t~string212.offset|=0, |#t~string220.base|=18446744073709551554, |#t~string220.offset|=0, |#t~string232.base|=18446744073709551586, |#t~string232.offset|=0, |#t~string257.base|=18446744073709551491, |#t~string257.offset|=0, |#t~string26.base|=18446744073709551572, |#t~string26.offset|=0, |#t~string262.base|=18446744073709551530, |#t~string262.offset|=0, |#t~string273.base|=18446744073709551606, |#t~string273.offset|=0, |#t~string276.base|=18446744073709551571, |#t~string276.offset|=0, |#t~string287.base|=18446744073709551568, |#t~string287.offset|=0, |#t~string295.base|=18446744073709551494, |#t~string295.offset|=0, |#t~string30.base|=18446744073709551604, |#t~string30.offset|=0, |#t~string305.base|=18446744073709551533, |#t~string305.offset|=0, |#t~string312.base|=18446744073709551525, |#t~string312.offset|=0, |#t~string317.base|=18446744073709551624, |#t~string317.offset|=0, |#t~string332.base|=18446744073709551597, |#t~string332.offset|=0, |#t~string345.base|=18446744073709551513, |#t~string345.offset|=0, |#t~string354.base|=18446744073709551515, |#t~string354.offset|=0, |#t~string360.base|=18446744073709551620, |#t~string360.offset|=0, |#t~string371.base|=18446744073709551590, |#t~string371.offset|=0, |#t~string389.base|=18446744073709551501, |#t~string389.offset|=0, |#t~string396.base|=18446744073709551543, |#t~string396.offset|=0, |#t~string400.base|=18446744073709551507, |#t~string400.offset|=0, |#t~string404.base|=18446744073709551495, |#t~string404.offset|=0, |#t~string408.base|=18446744073709551493, |#t~string408.offset|=0, |#t~string412.base|=18446744073709551540, |#t~string412.offset|=0, |#t~string421.base|=18446744073709551577, |#t~string421.offset|=0, |#t~string423.base|=18446744073709551574, |#t~string423.offset|=0, |#t~string426.base|=18446744073709551578, |#t~string426.offset|=0, |#t~string49.base|=18446744073709551601, |#t~string49.offset|=0, |#t~string54.base|=18446744073709551522, |#t~string54.offset|=0, |old(~ldv_coherent_state~0)|=0, |old(~LDV_IN_INTERRUPT~0)|=0, |old(~ldv_urb_state~0)|=0, |old(~res_ems_usb_close_12~0)|=0, |old(~res_ems_usb_open_10~0)|=0, |old(~res_ems_usb_probe_16~0)|=0, |~#__key___7~0.base|=18446744073709551506, |~#__key___7~0.offset|=0, |~#__key___8~0.base|=18446744073709551611, |~#__key___8~0.offset|=0, |~#ems_usb_bittiming_const~0.base|=18446744073709551594, |~#ems_usb_bittiming_const~0.offset|=0, |~#ems_usb_driver~0.base|=18446744073709551548, |~#ems_usb_driver~0.offset|=0, |~#ems_usb_netdev_ops~0.base|=18446744073709551559, |~#ems_usb_netdev_ops~0.offset|=0, |~#ems_usb_table~0.base|=18446744073709551592, |~#ems_usb_table~0.offset|=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=18446744073709551521, #NULL.offset=18446744073709551621, #t~string12.base=18446744073709551528, #t~string12.offset=18446744073709551622, #t~string14.base=18446744073709551516, #t~string14.offset=18446744073709551509, #t~string195.base=18446744073709551619, #t~string195.offset=18446744073709551561, #t~string212.base=18446744073709551510, #t~string212.offset=18446744073709551618, #t~string220.base=18446744073709551552, #t~string220.offset=18446744073709551628, #t~string232.base=18446744073709551584, #t~string232.offset=18446744073709551585, #t~string257.base=18446744073709551489, #t~string257.offset=18446744073709551607, #t~string26.base=18446744073709551570, #t~string26.offset=18446744073709551583, #t~string262.base=18446744073709551529, #t~string262.offset=18446744073709551551, #t~string273.base=18446744073709551605, #t~string273.offset=18446744073709551555, #t~string276.base=18446744073709551569, #t~string276.offset=18446744073709551553, #t~string287.base=18446744073709551565, #t~string287.offset=18446744073709551503, #t~string295.base=18446744073709551496, #t~string295.offset=18446744073709551536, #t~string30.base=18446744073709551603, #t~string30.offset=18446744073709551566, #t~string305.base=18446744073709551535, #t~string305.offset=18446744073709551526, #t~string312.base=18446744073709551523, #t~string312.offset=18446744073709551580, #t~string317.base=18446744073709551623, #t~string317.offset=18446744073709551602, #t~string332.base=18446744073709551598, #t~string332.offset=18446744073709551538, #t~string345.base=18446744073709551512, #t~string345.offset=18446744073709551589, #t~string354.base=18446744073709551514, #t~string354.offset=18446744073709551557, #t~string360.base=18446744073709551616, #t~string360.offset=18446744073709551546, #t~string371.base=18446744073709551591, #t~string371.offset=18446744073709551517, #t~string389.base=18446744073709551502, #t~string389.offset=18446744073709551558, #t~string396.base=18446744073709551542, #t~string396.offset=18446744073709551630, #t~string400.base=18446744073709551505, #t~string400.offset=18446744073709551599, #t~string404.base=18446744073709551497, #t~string404.offset=18446744073709551498, #t~string408.base=18446744073709551492, #t~string408.offset=18446744073709551626, #t~string412.base=18446744073709551541, #t~string412.offset=18446744073709551534, #t~string421.base=18446744073709551579, #t~string421.offset=18446744073709551537, #t~string423.base=18446744073709551573, #t~string423.offset=18446744073709551520, #t~string426.base=18446744073709551576, #t~string426.offset=18446744073709551563, #t~string49.base=18446744073709551600, #t~string49.offset=18446744073709551610, #t~string54.base=18446744073709551518, #t~string54.offset=18446744073709551575, old(#NULL.base)=18446744073709551521, old(#NULL.offset)=18446744073709551621, old(#t~string12.base)=18446744073709551528, old(#t~string12.offset)=18446744073709551622, old(#t~string14.base)=18446744073709551516, old(#t~string14.offset)=18446744073709551509, old(#t~string195.base)=18446744073709551619, old(#t~string195.offset)=18446744073709551561, old(#t~string212.base)=18446744073709551510, old(#t~string212.offset)=18446744073709551618, old(#t~string220.base)=18446744073709551552, old(#t~string220.offset)=18446744073709551628, old(#t~string232.base)=18446744073709551584, old(#t~string232.offset)=18446744073709551585, old(#t~string257.base)=18446744073709551489, old(#t~string257.offset)=18446744073709551607, old(#t~string26.base)=18446744073709551570, old(#t~string26.offset)=18446744073709551583, old(#t~string262.base)=18446744073709551529, old(#t~string262.offset)=18446744073709551551, old(#t~string273.base)=18446744073709551605, old(#t~string273.offset)=18446744073709551555, old(#t~string276.base)=18446744073709551569, old(#t~string276.offset)=18446744073709551553, old(#t~string287.base)=18446744073709551565, old(#t~string287.offset)=18446744073709551503, old(#t~string295.base)=18446744073709551496, old(#t~string295.offset)=18446744073709551536, old(#t~string30.base)=18446744073709551603, old(#t~string30.offset)=18446744073709551566, old(#t~string305.base)=18446744073709551535, old(#t~string305.offset)=18446744073709551526, old(#t~string312.base)=18446744073709551523, old(#t~string312.offset)=18446744073709551580, old(#t~string317.base)=18446744073709551623, old(#t~string317.offset)=18446744073709551602, old(#t~string332.base)=18446744073709551598, old(#t~string332.offset)=18446744073709551538, old(#t~string345.base)=18446744073709551512, old(#t~string345.offset)=18446744073709551589, old(#t~string354.base)=18446744073709551514, old(#t~string354.offset)=18446744073709551557, old(#t~string360.base)=18446744073709551616, old(#t~string360.offset)=18446744073709551546, old(#t~string371.base)=18446744073709551591, old(#t~string371.offset)=18446744073709551517, old(#t~string389.base)=18446744073709551502, old(#t~string389.offset)=18446744073709551558, old(#t~string396.base)=18446744073709551542, old(#t~string396.offset)=18446744073709551630, old(#t~string400.base)=18446744073709551505, old(#t~string400.offset)=18446744073709551599, old(#t~string404.base)=18446744073709551497, old(#t~string404.offset)=18446744073709551498, old(#t~string408.base)=18446744073709551492, old(#t~string408.offset)=18446744073709551626, old(#t~string412.base)=18446744073709551541, old(#t~string412.offset)=18446744073709551534, old(#t~string421.base)=18446744073709551579, old(#t~string421.offset)=18446744073709551537, old(#t~string423.base)=18446744073709551573, old(#t~string423.offset)=18446744073709551520, old(#t~string426.base)=18446744073709551576, old(#t~string426.offset)=18446744073709551563, old(#t~string49.base)=18446744073709551600, old(#t~string49.offset)=18446744073709551610, old(#t~string54.base)=18446744073709551518, old(#t~string54.offset)=18446744073709551575, old(~#__key___7~0.base)=18446744073709551504, old(~#__key___7~0.offset)=18446744073709551556, old(~#__key___8~0.base)=18446744073709551613, old(~#__key___8~0.offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0.base)=18446744073709551595, old(~#ems_usb_bittiming_const~0.offset)=18446744073709551608, old(~#ems_usb_driver~0.base)=18446744073709551499, old(~#ems_usb_driver~0.offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0.base)=18446744073709551545, old(~#ems_usb_netdev_ops~0.offset)=18446744073709551547, old(~#ems_usb_table~0.base)=18446744073709551593, old(~#ems_usb_table~0.offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0.base=18446744073709551504, ~#__key___7~0.offset=18446744073709551556, ~#__key___8~0.base=18446744073709551613, ~#__key___8~0.offset=18446744073709551562, ~#ems_usb_bittiming_const~0.base=18446744073709551595, ~#ems_usb_bittiming_const~0.offset=18446744073709551608, ~#ems_usb_driver~0.base=18446744073709551499, ~#ems_usb_driver~0.offset=18446744073709551531, ~#ems_usb_netdev_ops~0.base=18446744073709551545, ~#ems_usb_netdev_ops~0.offset=18446744073709551547, ~#ems_usb_table~0.base=18446744073709551593, ~#ems_usb_table~0.offset=18446744073709551524, ~ldv_coherent_state~0=18446744073709551488, ~LDV_IN_INTERRUPT~0=18446744073709551508, ~ldv_urb_state~0=18446744073709551560, ~res_ems_usb_close_12~0=18446744073709551612, ~res_ems_usb_open_10~0=18446744073709551615, ~res_ems_usb_probe_16~0=18446744073709551500] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L5061] call #t~string12.base, #t~string12.offset := #Ultimate.alloc(26); [L5071] call #t~string14.base, #t~string14.offset := #Ultimate.alloc(65); [L5167] call #t~string26.base, #t~string26.offset := #Ultimate.alloc(8); [L5203] call #t~string30.base, #t~string30.offset := #Ultimate.alloc(24); [L5403] call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25); [L5421] call #t~string54.base, #t~string54.offset := #Ultimate.alloc(34); [L5639] call #t~string195.base, #t~string195.offset := #Ultimate.alloc(21); [L5710] call #t~string212.base, #t~string212.offset := #Ultimate.alloc(14); [L5737] call #t~string220.base, #t~string220.offset := #Ultimate.alloc(39); [L5808] call #t~string232.base, #t~string232.offset := #Ultimate.alloc(21); [L5908] call #t~string257.base, #t~string257.offset := #Ultimate.alloc(25); [L5920] call #t~string262.base, #t~string262.offset := #Ultimate.alloc(31); [L5961] call #t~string273.base, #t~string273.offset := #Ultimate.alloc(26); [L5969] call #t~string276.base, #t~string276.offset := #Ultimate.alloc(28); [L5990] call #t~string287.base, #t~string287.offset := #Ultimate.alloc(28); [L6040] call #t~string295.base, #t~string295.offset := #Ultimate.alloc(29); [L6110] call #t~string305.base, #t~string305.offset := #Ultimate.alloc(27); [L6163] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(25); [L6175] call #t~string317.base, #t~string317.offset := #Ultimate.alloc(31); [L6240] call #t~string332.base, #t~string332.offset := #Ultimate.alloc(28); [L6274] call #t~string345.base, #t~string345.offset := #Ultimate.alloc(18); [L6324] call #t~string354.base, #t~string354.offset := #Ultimate.alloc(21); [L6409] call #t~string360.base, #t~string360.offset := #Ultimate.alloc(22); [L6456] call #t~string371.base, #t~string371.offset := #Ultimate.alloc(33); [L6505] call #t~string389.base, #t~string389.offset := #Ultimate.alloc(32); [L6548] call #t~string396.base, #t~string396.offset := #Ultimate.alloc(25); [L6560] call #t~string400.base, #t~string400.offset := #Ultimate.alloc(28); [L6572] call #t~string404.base, #t~string404.offset := #Ultimate.alloc(26); [L6586] call #t~string408.base, #t~string408.offset := #Ultimate.alloc(36); [L6598] call #t~string412.base, #t~string412.offset := #Ultimate.alloc(34); [L6650] call #t~string421.base, #t~string421.offset := #Ultimate.alloc(8); [L6675] call #t~string423.base, #t~string423.offset := #Ultimate.alloc(33); [L6680] call #t~string426.base, #t~string426.offset := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[0 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[1 := 117]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[2 := 116]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[3 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[4 := 111]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[5 := 114]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[6 := 61]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[7 := 83]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[8 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[9 := 98]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[10 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[11 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[12 := 116]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[13 := 105]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[14 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[15 := 110]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[16 := 32]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[17 := 72]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[18 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[19 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[20 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[21 := 32]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[22 := 60]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[23 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[24 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[25 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[26 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[27 := 64]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[28 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[29 := 109]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[30 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[31 := 45]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[32 := 119]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[33 := 117]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[34 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[35 := 110]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[36 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[37 := 99]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[38 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[39 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[40 := 46]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[41 := 99]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[42 := 111]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[43 := 109]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[44 := 62]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[45 := 0]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[0 := 100]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[1 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[2 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[3 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[4 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[5 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[6 := 112]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[7 := 116]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[8 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[9 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[10 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[11 := 61]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[12 := 67]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[13 := 65]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[14 := 78]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[15 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[16 := 100]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[17 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[18 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[19 := 118]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[20 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[21 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[22 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[23 := 102]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[24 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[25 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[26 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[27 := 69]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[28 := 77]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[29 := 83]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[30 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[31 := 68]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[32 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[33 := 46]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[34 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[35 := 84]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[36 := 104]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[37 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[38 := 109]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[39 := 97]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[40 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[41 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[42 := 87]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[43 := 117]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[44 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[45 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[46 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[47 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[48 := 104]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[49 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[50 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[51 := 67]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[52 := 65]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[53 := 78]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[54 := 47]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[55 := 85]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[56 := 83]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[57 := 66]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[58 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[59 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[60 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[61 := 116]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[62 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[63 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[64 := 102]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[65 := 97]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[66 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[67 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[68 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[69 := 0]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[0 := 108]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[1 := 105]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[2 := 99]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[3 := 101]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[4 := 110]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[5 := 115]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[6 := 101]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[7 := 61]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[8 := 71]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[9 := 80]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[10 := 76]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[11 := 32]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[12 := 118]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[13 := 50]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[14 := 0]; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] call ~#__key___7~0.base, ~#__key___7~0.offset := #Ultimate.alloc(8); [L5173] call write~init~int(0, ~#__key___7~0.base, ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 1 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 2 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 3 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 4 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 5 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 6 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 7 + ~#__key___7~0.offset, 1); [L5174] call ~#__key___8~0.base, ~#__key___8~0.offset := #Ultimate.alloc(8); [L5174] call write~init~int(0, ~#__key___8~0.base, ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 1 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 2 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 3 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 4 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 5 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 6 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 7 + ~#__key___8~0.offset, 1); [L5360-L5362] call ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset := #Ultimate.alloc(24); [L5360-L5362] call write~init~int(3, ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(4822, ~#ems_usb_table~0.base, 2 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(1092, ~#ems_usb_table~0.base, 4 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 6 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 8 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 10 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 11 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 12 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 13 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 14 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 15 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 16 + ~#ems_usb_table~0.offset, 8); [L6336-L6376] call ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset := #Ultimate.alloc(336); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 8 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_open.base, #funAddr~ems_usb_open.offset, ~#ems_usb_netdev_ops~0.base, 16 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_close.base, #funAddr~ems_usb_close.offset, ~#ems_usb_netdev_ops~0.base, 24 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_start_xmit.base, #funAddr~ems_usb_start_xmit.offset, ~#ems_usb_netdev_ops~0.base, 32 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 40 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 48 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 56 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 64 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 72 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 80 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 88 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 96 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 104 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 112 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 120 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 128 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 136 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 144 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 152 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 160 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 168 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 176 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 184 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 192 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 200 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 208 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 216 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 224 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 232 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 240 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 248 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 256 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 264 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 272 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 280 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 288 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 296 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 304 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 312 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 320 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 328 + ~#ems_usb_netdev_ops~0.offset, 8); [L6377-L6381] call ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset := #Ultimate.alloc(48); [L6377-L6381] call write~init~int(101, ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(109, ~#ems_usb_bittiming_const~0.base, 1 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 2 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(95, ~#ems_usb_bittiming_const~0.base, 3 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(117, ~#ems_usb_bittiming_const~0.base, 4 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 5 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(98, ~#ems_usb_bittiming_const~0.base, 6 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 7 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 8 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 9 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 10 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 11 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 12 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 13 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 14 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 15 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 16 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(16, ~#ems_usb_bittiming_const~0.base, 20 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 24 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(8, ~#ems_usb_bittiming_const~0.base, 28 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(4, ~#ems_usb_bittiming_const~0.base, 32 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 36 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(64, ~#ems_usb_bittiming_const~0.base, 40 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 44 + ~#ems_usb_bittiming_const~0.offset, 4); [L6649-L6667] call ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset := #Ultimate.alloc(281); [L6649-L6667] call write~init~$Pointer$(#t~string421.base, #t~string421.offset, ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(#funAddr~ems_usb_probe.base, #funAddr~ems_usb_probe.offset, ~#ems_usb_driver~0.base, 8 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(#funAddr~ems_usb_disconnect.base, #funAddr~ems_usb_disconnect.offset, ~#ems_usb_driver~0.base, 16 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 24 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 32 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 40 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 48 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 56 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 64 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, ~#ems_usb_driver~0.base, 72 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 80 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 84 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 88 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 92 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 100 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 108 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 116 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 124 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 132 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 136 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 144 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 152 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 160 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 168 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 176 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 184 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 192 + ~#ems_usb_driver~0.offset, 1); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 193 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 201 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 209 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 217 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 225 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 233 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 241 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 249 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 257 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 265 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 269 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 273 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 277 + ~#ems_usb_driver~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(#NULL.base)=18446744073709551521, old(#NULL.offset)=18446744073709551621, old(#t~string12.base)=18446744073709551528, old(#t~string12.offset)=18446744073709551622, old(#t~string14.base)=18446744073709551516, old(#t~string14.offset)=18446744073709551509, old(#t~string195.base)=18446744073709551619, old(#t~string195.offset)=18446744073709551561, old(#t~string212.base)=18446744073709551510, old(#t~string212.offset)=18446744073709551618, old(#t~string220.base)=18446744073709551552, old(#t~string220.offset)=18446744073709551628, old(#t~string232.base)=18446744073709551584, old(#t~string232.offset)=18446744073709551585, old(#t~string257.base)=18446744073709551489, old(#t~string257.offset)=18446744073709551607, old(#t~string26.base)=18446744073709551570, old(#t~string26.offset)=18446744073709551583, old(#t~string262.base)=18446744073709551529, old(#t~string262.offset)=18446744073709551551, old(#t~string273.base)=18446744073709551605, old(#t~string273.offset)=18446744073709551555, old(#t~string276.base)=18446744073709551569, old(#t~string276.offset)=18446744073709551553, old(#t~string287.base)=18446744073709551565, old(#t~string287.offset)=18446744073709551503, old(#t~string295.base)=18446744073709551496, old(#t~string295.offset)=18446744073709551536, old(#t~string30.base)=18446744073709551603, old(#t~string30.offset)=18446744073709551566, old(#t~string305.base)=18446744073709551535, old(#t~string305.offset)=18446744073709551526, old(#t~string312.base)=18446744073709551523, old(#t~string312.offset)=18446744073709551580, old(#t~string317.base)=18446744073709551623, old(#t~string317.offset)=18446744073709551602, old(#t~string332.base)=18446744073709551598, old(#t~string332.offset)=18446744073709551538, old(#t~string345.base)=18446744073709551512, old(#t~string345.offset)=18446744073709551589, old(#t~string354.base)=18446744073709551514, old(#t~string354.offset)=18446744073709551557, old(#t~string360.base)=18446744073709551616, old(#t~string360.offset)=18446744073709551546, old(#t~string371.base)=18446744073709551591, old(#t~string371.offset)=18446744073709551517, old(#t~string389.base)=18446744073709551502, old(#t~string389.offset)=18446744073709551558, old(#t~string396.base)=18446744073709551542, old(#t~string396.offset)=18446744073709551630, old(#t~string400.base)=18446744073709551505, old(#t~string400.offset)=18446744073709551599, old(#t~string404.base)=18446744073709551497, old(#t~string404.offset)=18446744073709551498, old(#t~string408.base)=18446744073709551492, old(#t~string408.offset)=18446744073709551626, old(#t~string412.base)=18446744073709551541, old(#t~string412.offset)=18446744073709551534, old(#t~string421.base)=18446744073709551579, old(#t~string421.offset)=18446744073709551537, old(#t~string423.base)=18446744073709551573, old(#t~string423.offset)=18446744073709551520, old(#t~string426.base)=18446744073709551576, old(#t~string426.offset)=18446744073709551563, old(#t~string49.base)=18446744073709551600, old(#t~string49.offset)=18446744073709551610, old(#t~string54.base)=18446744073709551518, old(#t~string54.offset)=18446744073709551575, old(~#__key___7~0.base)=18446744073709551504, old(~#__key___7~0.offset)=18446744073709551556, old(~#__key___8~0.base)=18446744073709551613, old(~#__key___8~0.offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0.base)=18446744073709551595, old(~#ems_usb_bittiming_const~0.offset)=18446744073709551608, old(~#ems_usb_driver~0.base)=18446744073709551499, old(~#ems_usb_driver~0.offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0.base)=18446744073709551545, old(~#ems_usb_netdev_ops~0.offset)=18446744073709551547, old(~#ems_usb_table~0.base)=18446744073709551593, old(~#ems_usb_table~0.offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(#NULL.base)=18446744073709551521, old(#NULL.offset)=18446744073709551621, old(#t~string12.base)=18446744073709551528, old(#t~string12.offset)=18446744073709551622, old(#t~string14.base)=18446744073709551516, old(#t~string14.offset)=18446744073709551509, old(#t~string195.base)=18446744073709551619, old(#t~string195.offset)=18446744073709551561, old(#t~string212.base)=18446744073709551510, old(#t~string212.offset)=18446744073709551618, old(#t~string220.base)=18446744073709551552, old(#t~string220.offset)=18446744073709551628, old(#t~string232.base)=18446744073709551584, old(#t~string232.offset)=18446744073709551585, old(#t~string257.base)=18446744073709551489, old(#t~string257.offset)=18446744073709551607, old(#t~string26.base)=18446744073709551570, old(#t~string26.offset)=18446744073709551583, old(#t~string262.base)=18446744073709551529, old(#t~string262.offset)=18446744073709551551, old(#t~string273.base)=18446744073709551605, old(#t~string273.offset)=18446744073709551555, old(#t~string276.base)=18446744073709551569, old(#t~string276.offset)=18446744073709551553, old(#t~string287.base)=18446744073709551565, old(#t~string287.offset)=18446744073709551503, old(#t~string295.base)=18446744073709551496, old(#t~string295.offset)=18446744073709551536, old(#t~string30.base)=18446744073709551603, old(#t~string30.offset)=18446744073709551566, old(#t~string305.base)=18446744073709551535, old(#t~string305.offset)=18446744073709551526, old(#t~string312.base)=18446744073709551523, old(#t~string312.offset)=18446744073709551580, old(#t~string317.base)=18446744073709551623, old(#t~string317.offset)=18446744073709551602, old(#t~string332.base)=18446744073709551598, old(#t~string332.offset)=18446744073709551538, old(#t~string345.base)=18446744073709551512, old(#t~string345.offset)=18446744073709551589, old(#t~string354.base)=18446744073709551514, old(#t~string354.offset)=18446744073709551557, old(#t~string360.base)=18446744073709551616, old(#t~string360.offset)=18446744073709551546, old(#t~string371.base)=18446744073709551591, old(#t~string371.offset)=18446744073709551517, old(#t~string389.base)=18446744073709551502, old(#t~string389.offset)=18446744073709551558, old(#t~string396.base)=18446744073709551542, old(#t~string396.offset)=18446744073709551630, old(#t~string400.base)=18446744073709551505, old(#t~string400.offset)=18446744073709551599, old(#t~string404.base)=18446744073709551497, old(#t~string404.offset)=18446744073709551498, old(#t~string408.base)=18446744073709551492, old(#t~string408.offset)=18446744073709551626, old(#t~string412.base)=18446744073709551541, old(#t~string412.offset)=18446744073709551534, old(#t~string421.base)=18446744073709551579, old(#t~string421.offset)=18446744073709551537, old(#t~string423.base)=18446744073709551573, old(#t~string423.offset)=18446744073709551520, old(#t~string426.base)=18446744073709551576, old(#t~string426.offset)=18446744073709551563, old(#t~string49.base)=18446744073709551600, old(#t~string49.offset)=18446744073709551610, old(#t~string54.base)=18446744073709551518, old(#t~string54.offset)=18446744073709551575, old(~#__key___7~0.base)=18446744073709551504, old(~#__key___7~0.offset)=18446744073709551556, old(~#__key___8~0.base)=18446744073709551613, old(~#__key___8~0.offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0.base)=18446744073709551595, old(~#ems_usb_bittiming_const~0.offset)=18446744073709551608, old(~#ems_usb_driver~0.base)=18446744073709551499, old(~#ems_usb_driver~0.offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0.base)=18446744073709551545, old(~#ems_usb_netdev_ops~0.offset)=18446744073709551547, old(~#ems_usb_table~0.base)=18446744073709551593, old(~#ems_usb_table~0.offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret437 := main(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6730] havoc ~var_group1~0.base, ~var_group1~0.offset; [L6731] havoc ~var_group2~0.base, ~var_group2~0.offset; [L6732] havoc ~var_group3~0.base, ~var_group3~0.offset; [L6733] havoc ~var_ems_usb_probe_16_p1~0.base, ~var_ems_usb_probe_16_p1~0.offset; [L6734] havoc ~tmp___7~27; [L6735] havoc ~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc ~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc ~tmp___8~13; [L6738] havoc ~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] call ldv_initialize(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call #t~ret428 := ems_usb_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6676] CALL call #t~ret424 := usb_register(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset); VAL [#in~driver.base=18446744073709551548, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L5162-L5171] ~driver.base, ~driver.offset := #in~driver.base, #in~driver.offset; [L5163] havoc ~tmp___7~9; [L5167] call #t~ret27 := usb_register_driver(~driver.base, ~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string26.base, #t~string26.offset); [L5167] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L5167] ~tmp___7~9 := #t~ret27; [L5167] havoc #t~ret27; [L5169] #res := ~tmp___7~9; VAL [#in~driver.base=18446744073709551548, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~driver.base=18446744073709551548, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~9=0] [L5162-L5171] ensures true; VAL [#in~driver.base=18446744073709551548, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~driver.base=18446744073709551548, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~9=0] [L6676] RET call #t~ret424 := usb_register(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret424=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6678-L6685] assume !(0 != ~err~5); [L6686] #res := 0; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6669] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] RET call #t~ret428 := ems_usb_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret428=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= #t~ret428 && #t~ret428 <= 2147483647; [L6744] ~tmp___7~27 := #t~ret428; [L6744] havoc #t~ret428; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6746-L6750] assume !(0 != ~tmp___7~27); [L6751] ~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] ~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6754-L6859] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___9~5=1] [L6759-L6769] assume 0 != ~tmp___9~5; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___9~5=1] [L6771] assume -2147483648 <= #t~nondet430 && #t~nondet430 <= 2147483647; [L6771] ~tmp___8~13 := #t~nondet430; [L6771] havoc #t~nondet430; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6773-L6858] assume !(0 == ~tmp___8~13); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6776-L6858] assume !(1 == ~tmp___8~13); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6779-L6858] assume 2 == ~tmp___8~13; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6824] CALL call #t~ret433 := ems_usb_start_xmit(~var_group2~0.base, ~var_group2~0.offset, ~var_group1~0.base, ~var_group1~0.offset); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6125-L6308] ~skb.base, ~skb.offset := #in~skb.base, #in~skb.offset; [L6125-L6308] ~netdev.base, ~netdev.offset := #in~netdev.base, #in~netdev.offset; [L6126] havoc ~dev~4.base, ~dev~4.offset; [L6127] havoc ~tmp___7~20.base, ~tmp___7~20.offset; [L6128] havoc ~context~1.base, ~context~1.offset; [L6129] havoc ~stats~2.base, ~stats~2.offset; [L6130] havoc ~cf~3.base, ~cf~3.offset; [L6131] havoc ~msg~1.base, ~msg~1.offset; [L6132] havoc ~urb~1.base, ~urb~1.offset; [L6133] havoc ~buf~1.base, ~buf~1.offset; [L6134] havoc ~i~3; [L6135] havoc ~err~3; [L6136] havoc ~size~0; [L6137] havoc ~tmp___8~8; [L6138] havoc ~tmp___9~2.base, ~tmp___9~2.offset; [L6139] havoc ~tmp___10~0; [L6140] havoc ~tmp___11~0; [L6141] havoc ~tmp___12~0; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb.base=18446744073709551627, ~skb.offset=0] [L6145] CALL call #t~ret306.base, #t~ret306.offset := netdev_priv(~netdev.base, ~netdev.offset); VAL [#in~dev.base=0, #in~dev.offset=-520, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L4983] #res.base, #res.offset := ~dev.base, ~dev.offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); VAL [#in~dev.base=0, #in~dev.offset=-520, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=-520, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ensures true; VAL [#in~dev.base=0, #in~dev.offset=-520, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=-520, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] RET call #t~ret306.base, #t~ret306.offset := netdev_priv(~netdev.base, ~netdev.offset); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret306.base=0, #t~ret306.offset=-520, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb.base=18446744073709551627, ~skb.offset=0] [L6145] ~tmp___7~20.base, ~tmp___7~20.offset := #t~ret306.base, #t~ret306.offset; [L6145] havoc #t~ret306.base, #t~ret306.offset; [L6146] ~dev~4.base, ~dev~4.offset := ~tmp___7~20.base, ~tmp___7~20.offset; [L6147] ~context~1.base, ~context~1.offset := 0, 0; [L6148] ~stats~2.base, ~stats~2.offset := ~netdev.base, 188 + ~netdev.offset; [L6149] call #t~mem307.base, #t~mem307.offset := read~$Pointer$(~skb.base, 226 + ~skb.offset, 8); [L6149] ~cf~3.base, ~cf~3.offset := #t~mem307.base, #t~mem307.offset; [L6149] havoc #t~mem307.base, #t~mem307.offset; [L6150] ~size~0 := 28; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520] [L6151] CALL call #t~ret308 := can_dropped_invalid_skb(~netdev.base, ~netdev.offset, ~skb.base, ~skb.offset); VAL [#in~dev.base=0, #in~dev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L5279-L5308] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L5279-L5308] ~skb.base, ~skb.offset := #in~skb.base, #in~skb.offset; [L5280] havoc ~cf~0.base, ~cf~0.offset; [L5281] havoc ~tmp___7~10; [L5282] havoc ~tmp___8~3; [L5285] call #t~mem34.base, #t~mem34.offset := read~$Pointer$(~skb.base, 226 + ~skb.offset, 8); [L5285] ~cf~0.base, ~cf~0.offset := #t~mem34.base, #t~mem34.offset; [L5285] havoc #t~mem34.base, #t~mem34.offset; [L5286] call #t~mem35 := read~int(~skb.base, 104 + ~skb.offset, 4); VAL [#in~dev.base=0, #in~dev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=4294967309, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~0.base=18446744073709551614, ~cf~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb.base=18446744073709551627, ~skb.offset=0] [L5286-L5293] assume !(13 != #t~mem35 % 4294967296 % 18446744073709551616); [L5286] havoc #t~mem35; [L5289] call #t~mem36 := read~int(~cf~0.base, 4 + ~cf~0.offset, 1); VAL [#in~dev.base=0, #in~dev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~0.base=18446744073709551614, ~cf~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb.base=18446744073709551627, ~skb.offset=0] [L5289-L5293] assume !(#t~mem36 % 256 > 8); [L5289] havoc #t~mem36; [L5292] ~tmp___7~10 := 0; VAL [#in~dev.base=0, #in~dev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~0.base=18446744073709551614, ~cf~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb.base=18446744073709551627, ~skb.offset=0, ~tmp___7~10=0] [L5295] ~tmp___8~3 := ~tmp___7~10; VAL [#in~dev.base=0, #in~dev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~0.base=18446744073709551614, ~cf~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb.base=18446744073709551627, ~skb.offset=0, ~tmp___7~10=0, ~tmp___8~3=0] [L5297-L5305] assume !(0 != ~tmp___8~3); [L5306] #res := 0; VAL [#in~dev.base=0, #in~dev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~0.base=18446744073709551614, ~cf~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb.base=18446744073709551627, ~skb.offset=0, ~tmp___7~10=0, ~tmp___8~3=0] [L5279-L5308] ensures true; VAL [#in~dev.base=0, #in~dev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~0.base=18446744073709551614, ~cf~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb.base=18446744073709551627, ~skb.offset=0, ~tmp___7~10=0, ~tmp___8~3=0] [L6151] RET call #t~ret308 := can_dropped_invalid_skb(~netdev.base, ~netdev.offset, ~skb.base, ~skb.offset); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret308=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520] [L6151] assume -2147483648 <= #t~ret308 && #t~ret308 <= 2147483647; [L6151] ~tmp___8~8 := #t~ret308; [L6151] havoc #t~ret308; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0] [L6153-L6157] assume !(0 != ~tmp___8~8); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0] [L6159] CALL call #t~ret309.base, #t~ret309.offset := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; [L6962] havoc ~tmp___7~29.base, ~tmp___7~29.offset; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6966-L6980] assume !false; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6969] call #t~ret436.base, #t~ret436.offset := ldv_undefined_pointer(); [L6969] ~tmp___7~29.base, ~tmp___7~29.offset := #t~ret436.base, #t~ret436.offset; [L6969] havoc #t~ret436.base, #t~ret436.offset; [L6970] ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset := ~tmp___7~29.base, ~tmp___7~29.offset; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~1.base=18446744073709551609, ~arbitrary_memory~1.offset=-104, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29.base=18446744073709551609, ~tmp___7~29.offset=-104] [L6972-L6976] assume !(~arbitrary_memory~1.base == 0 && ~arbitrary_memory~1.offset == 0); [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res.base, #res.offset := ~arbitrary_memory~1.base, ~arbitrary_memory~1.offset; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #res.base=18446744073709551609, #res.offset=-104, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~1.base=18446744073709551609, ~arbitrary_memory~1.offset=-104, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29.base=18446744073709551609, ~tmp___7~29.offset=-104] [L6959] ensures true; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL.base=0, #NULL.offset=0, #res.base=18446744073709551609, #res.offset=-104, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~1.base=18446744073709551609, ~arbitrary_memory~1.offset=-104, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29.base=18446744073709551609, ~tmp___7~29.offset=-104] [L6159] RET call #t~ret309.base, #t~ret309.offset := usb_alloc_urb(0, 32); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret309.base=18446744073709551609, #t~ret309.offset=-104, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0] [L6159] ~urb~1.base, ~urb~1.offset := #t~ret309.base, #t~ret309.offset; [L6159] havoc #t~ret309.base, #t~ret309.offset; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6161-L6168] assume !(~urb~1.base == 0 && ~urb~1.offset == 0); [L6170] call #t~mem313.base, #t~mem313.offset := read~$Pointer$(~dev~4.base, 336 + ~dev~4.offset, 8); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem313.base=18446744073709551544, #t~mem313.offset=18446744073709551588, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6170] CALL call #t~ret314.base, #t~ret314.offset := usb_alloc_coherent(#t~mem313.base, #t~mem313.offset, ~size~0, 32, ~urb~1.base, 104 + ~urb~1.offset); VAL [#in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma.base=18446744073709551609, #in~dma.offset=0, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma.base, ~dma.offset := #in~dma.base, #in~dma.offset; [L6898] havoc ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; [L6899] havoc ~tmp___7~28.base, ~tmp___7~28.offset; VAL [#in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma.base=18446744073709551609, #in~dma.offset=0, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma.base=18446744073709551609, ~dma.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6903-L6917] assume !false; VAL [#in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma.base=18446744073709551609, #in~dma.offset=0, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma.base=18446744073709551609, ~dma.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6906] call #t~ret435.base, #t~ret435.offset := ldv_undefined_pointer(); [L6906] ~tmp___7~28.base, ~tmp___7~28.offset := #t~ret435.base, #t~ret435.offset; [L6906] havoc #t~ret435.base, #t~ret435.offset; [L6907] ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset := ~tmp___7~28.base, ~tmp___7~28.offset; VAL [#in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma.base=18446744073709551609, #in~dma.offset=0, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~0.base=18446744073709551487, ~arbitrary_memory~0.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma.base=18446744073709551609, ~dma.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28.base=18446744073709551487, ~tmp___7~28.offset=130] [L6909-L6913] assume !(~arbitrary_memory~0.base == 0 && ~arbitrary_memory~0.offset == 0); [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res.base, #res.offset := ~arbitrary_memory~0.base, ~arbitrary_memory~0.offset; VAL [#in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma.base=18446744073709551609, #in~dma.offset=0, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #res.base=18446744073709551487, #res.offset=130, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~0.base=18446744073709551487, ~arbitrary_memory~0.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma.base=18446744073709551609, ~dma.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28.base=18446744073709551487, ~tmp___7~28.offset=130] [L6894-L6895] ensures true; VAL [#in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma.base=18446744073709551609, #in~dma.offset=0, #in~mem_flags=32, #in~size=28, #NULL.base=0, #NULL.offset=0, #res.base=18446744073709551487, #res.offset=130, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~arbitrary_memory~0.base=18446744073709551487, ~arbitrary_memory~0.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma.base=18446744073709551609, ~dma.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28.base=18446744073709551487, ~tmp___7~28.offset=130] [L6170] RET call #t~ret314.base, #t~ret314.offset := usb_alloc_coherent(#t~mem313.base, #t~mem313.offset, ~size~0, 32, ~urb~1.base, 104 + ~urb~1.offset); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem313.base=18446744073709551544, #t~mem313.offset=18446744073709551588, #t~ret314.base=18446744073709551487, #t~ret314.offset=130, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6170] ~tmp___9~2.base, ~tmp___9~2.offset := #t~ret314.base, #t~ret314.offset; [L6170] havoc #t~ret314.base, #t~ret314.offset; [L6170] havoc #t~mem313.base, #t~mem313.offset; [L6171] ~buf~1.base, ~buf~1.offset := ~tmp___9~2.base, ~tmp___9~2.offset; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6173-L6181] assume !(~buf~1.base == 0 && ~buf~1.offset == 0); [L6182] ~msg~1.base, ~msg~1.offset := ~buf~1.base, 4 + ~buf~1.offset; [L6183] call #t~mem318 := read~int(~cf~3.base, ~cf~3.offset, 4); [L6183] call write~int(~bitwiseAnd(#t~mem318, 536870911), ~msg~1.base, 11 + ~msg~1.offset, 4); [L6183] havoc #t~mem318; [L6184] call #t~mem319 := read~int(~cf~3.base, 4 + ~cf~3.offset, 1); [L6184] call write~int(#t~mem319, ~msg~1.base, 15 + ~msg~1.offset, 1); [L6184] havoc #t~mem319; [L6185] call #t~mem320 := read~int(~cf~3.base, ~cf~3.offset, 4); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem320=18446744073709551567, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6185-L6214] assume 0 != ~bitwiseAnd(#t~mem320, 1073741824) % 4294967296; [L6185] havoc #t~mem320; [L6186] call #t~mem321 := read~int(~cf~3.base, ~cf~3.offset, 4); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem321=18446744073709551567, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6186-L6190] assume 0 != ~bitwiseAnd(#t~mem321, 2147483648) % 4294967296; [L6186] havoc #t~mem321; [L6187] call write~int(16, ~msg~1.base, ~msg~1.offset, 1); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6191] call write~int(5, ~msg~1.base, 1 + ~msg~1.offset, 1); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6215] call #t~mem326 := read~int(~msg~1.base, 11 + ~msg~1.offset, 4); [L6215] call write~int(#t~mem326, ~msg~1.base, 11 + ~msg~1.offset, 4); [L6215] havoc #t~mem326; [L6216] ~i~3 := 0; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6218-L6232] assume !false; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6220-L6224] assume ~i~3 < 10; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6225] call #t~mem327 := read~int(~dev~4.base, 8 + (520 + ~dev~4.offset + 13 * ~i~3), 4); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem327=4294967306, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6225-L6230] assume 10 == #t~mem327 % 4294967296; [L6225] havoc #t~mem327; [L6226] ~context~1.base, ~context~1.offset := ~dev~4.base, 520 + ~dev~4.offset + 13 * ~i~3; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6236-L6245] assume ~context~1.base == 0 && ~context~1.offset == 0; [L6238] call usb_unanchor_urb(~urb~1.base, ~urb~1.offset); [L6239] call #t~mem328.base, #t~mem328.offset := read~$Pointer$(~dev~4.base, 336 + ~dev~4.offset, 8); [L6239] call #t~mem329 := read~int(~urb~1.base, 104 + ~urb~1.offset, 8); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem328.base=18446744073709551544, #t~mem328.offset=18446744073709551588, #t~mem329=18446744073709551629, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6239] CALL call usb_free_coherent(#t~mem328.base, #t~mem328.offset, ~size~0, ~buf~1.base, ~buf~1.offset, #t~mem329); VAL [#in~addr.base=18446744073709551487, #in~addr.offset=130, #in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr.base, ~addr.offset := #in~addr.base, #in~addr.offset; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr.base=18446744073709551487, #in~addr.offset=130, #in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~addr.base=18446744073709551487, ~addr.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] assume !false; VAL [#in~addr.base=18446744073709551487, #in~addr.offset=130, #in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~addr.base=18446744073709551487, ~addr.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932-L6938] assume !!(0 != (~addr.base + ~addr.offset) % 18446744073709551616); VAL [#in~addr.base=18446744073709551487, #in~addr.offset=130, #in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~addr.base=18446744073709551487, ~addr.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] assume ~addr.base != 0 || ~addr.offset != 0; VAL [#in~addr.base=18446744073709551487, #in~addr.offset=130, #in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~addr.base=18446744073709551487, ~addr.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940-L6946] assume ~ldv_coherent_state~0 >= 1; VAL [#in~addr.base=18446744073709551487, #in~addr.offset=130, #in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~addr.base=18446744073709551487, ~addr.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr.base=18446744073709551487, #in~addr.offset=130, #in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~addr.base=18446744073709551487, ~addr.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6924] ensures true; VAL [#in~addr.base=18446744073709551487, #in~addr.offset=130, #in~dev.base=18446744073709551544, #in~dev.offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~addr.base=18446744073709551487, ~addr.offset=130, ~dev.base=18446744073709551544, ~dev.offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(#t~mem328.base, #t~mem328.offset, ~size~0, ~buf~1.base, ~buf~1.offset, #t~mem329); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem328.base=18446744073709551544, #t~mem328.offset=18446744073709551588, #t~mem329=18446744073709551629, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~i~3=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6239] havoc #t~mem329; [L6239] havoc #t~mem328.base, #t~mem328.offset; [L6240] havoc #t~nondet330; [L6240] call #t~mem331.base, #t~mem331.offset := read~$Pointer$(~netdev.base, 1149 + ~netdev.offset, 8); [L6240] havoc #t~mem331.base, #t~mem331.offset; [L6242] #res := 16; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #res=16, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~i~3=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6125-L6308] ensures true; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #res=16, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~buf~1.base=18446744073709551487, ~buf~1.offset=130, ~cf~3.base=18446744073709551614, ~cf~3.offset=0, ~context~1.base=0, ~context~1.offset=0, ~dev~4.base=0, ~dev~4.offset=-520, ~i~3=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1.base=18446744073709551487, ~msg~1.offset=134, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb.base=18446744073709551627, ~skb.offset=0, ~stats~2.base=0, ~stats~2.offset=-332, ~tmp___7~20.base=0, ~tmp___7~20.offset=-520, ~tmp___8~8=0, ~tmp___9~2.base=18446744073709551487, ~tmp___9~2.offset=130, ~urb~1.base=18446744073709551609, ~urb~1.offset=-104] [L6824] RET call #t~ret433 := ems_usb_start_xmit(~var_group2~0.base, ~var_group2~0.offset, ~var_group1~0.base, ~var_group1~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret433=16, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0.base=0, ~var_group1~0.offset=-520, ~var_group2~0.base=18446744073709551627, ~var_group2~0.offset=0] [L6824] assume -2147483648 <= #t~ret433 && #t~ret433 <= 2147483647; [L6824] havoc #t~ret433; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0.base=0, ~var_group1~0.offset=-520, ~var_group2~0.base=18446744073709551627, ~var_group2~0.offset=0] [L6754-L6859] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0.base=0, ~var_group1~0.offset=-520, ~var_group2~0.base=18446744073709551627, ~var_group2~0.offset=0] [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0.base=0, ~var_group1~0.offset=-520, ~var_group2~0.base=18446744073709551627, ~var_group2~0.offset=0] [L6759-L6769] assume !(0 != ~tmp___9~5); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0.base=0, ~var_group1~0.offset=-520, ~var_group2~0.base=18446744073709551627, ~var_group2~0.offset=0] [L6762-L6769] assume !!(0 == ~ldv_s_ems_usb_netdev_ops_net_device_ops~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0.base=0, ~var_group1~0.offset=-520, ~var_group2~0.base=18446744073709551627, ~var_group2~0.offset=0] [L6765-L6769] assume !!(0 == ~ldv_s_ems_usb_driver_usb_driver~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0.base=0, ~var_group1~0.offset=-520, ~var_group2~0.base=18446744073709551627, ~var_group2~0.offset=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] call usb_deregister(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6690] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] RET call ems_usb_exit(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0.base=0, ~var_group1~0.offset=-520, ~var_group2~0.base=18446744073709551627, ~var_group2~0.offset=0] [L6869] CALL call ldv_check_final_state(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027-L7033] assume !(0 == ~ldv_urb_state~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=18446744073709551521, #NULL.offset=18446744073709551621, #t~string12.base=18446744073709551528, #t~string12.offset=18446744073709551622, #t~string14.base=18446744073709551516, #t~string14.offset=18446744073709551509, #t~string195.base=18446744073709551619, #t~string195.offset=18446744073709551561, #t~string212.base=18446744073709551510, #t~string212.offset=18446744073709551618, #t~string220.base=18446744073709551552, #t~string220.offset=18446744073709551628, #t~string232.base=18446744073709551584, #t~string232.offset=18446744073709551585, #t~string257.base=18446744073709551489, #t~string257.offset=18446744073709551607, #t~string26.base=18446744073709551570, #t~string26.offset=18446744073709551583, #t~string262.base=18446744073709551529, #t~string262.offset=18446744073709551551, #t~string273.base=18446744073709551605, #t~string273.offset=18446744073709551555, #t~string276.base=18446744073709551569, #t~string276.offset=18446744073709551553, #t~string287.base=18446744073709551565, #t~string287.offset=18446744073709551503, #t~string295.base=18446744073709551496, #t~string295.offset=18446744073709551536, #t~string30.base=18446744073709551603, #t~string30.offset=18446744073709551566, #t~string305.base=18446744073709551535, #t~string305.offset=18446744073709551526, #t~string312.base=18446744073709551523, #t~string312.offset=18446744073709551580, #t~string317.base=18446744073709551623, #t~string317.offset=18446744073709551602, #t~string332.base=18446744073709551598, #t~string332.offset=18446744073709551538, #t~string345.base=18446744073709551512, #t~string345.offset=18446744073709551589, #t~string354.base=18446744073709551514, #t~string354.offset=18446744073709551557, #t~string360.base=18446744073709551616, #t~string360.offset=18446744073709551546, #t~string371.base=18446744073709551591, #t~string371.offset=18446744073709551517, #t~string389.base=18446744073709551502, #t~string389.offset=18446744073709551558, #t~string396.base=18446744073709551542, #t~string396.offset=18446744073709551630, #t~string400.base=18446744073709551505, #t~string400.offset=18446744073709551599, #t~string404.base=18446744073709551497, #t~string404.offset=18446744073709551498, #t~string408.base=18446744073709551492, #t~string408.offset=18446744073709551626, #t~string412.base=18446744073709551541, #t~string412.offset=18446744073709551534, #t~string421.base=18446744073709551579, #t~string421.offset=18446744073709551537, #t~string423.base=18446744073709551573, #t~string423.offset=18446744073709551520, #t~string426.base=18446744073709551576, #t~string426.offset=18446744073709551563, #t~string49.base=18446744073709551600, #t~string49.offset=18446744073709551610, #t~string54.base=18446744073709551518, #t~string54.offset=18446744073709551575, old(#NULL.base)=18446744073709551521, old(#NULL.offset)=18446744073709551621, old(#t~string12.base)=18446744073709551528, old(#t~string12.offset)=18446744073709551622, old(#t~string14.base)=18446744073709551516, old(#t~string14.offset)=18446744073709551509, old(#t~string195.base)=18446744073709551619, old(#t~string195.offset)=18446744073709551561, old(#t~string212.base)=18446744073709551510, old(#t~string212.offset)=18446744073709551618, old(#t~string220.base)=18446744073709551552, old(#t~string220.offset)=18446744073709551628, old(#t~string232.base)=18446744073709551584, old(#t~string232.offset)=18446744073709551585, old(#t~string257.base)=18446744073709551489, old(#t~string257.offset)=18446744073709551607, old(#t~string26.base)=18446744073709551570, old(#t~string26.offset)=18446744073709551583, old(#t~string262.base)=18446744073709551529, old(#t~string262.offset)=18446744073709551551, old(#t~string273.base)=18446744073709551605, old(#t~string273.offset)=18446744073709551555, old(#t~string276.base)=18446744073709551569, old(#t~string276.offset)=18446744073709551553, old(#t~string287.base)=18446744073709551565, old(#t~string287.offset)=18446744073709551503, old(#t~string295.base)=18446744073709551496, old(#t~string295.offset)=18446744073709551536, old(#t~string30.base)=18446744073709551603, old(#t~string30.offset)=18446744073709551566, old(#t~string305.base)=18446744073709551535, old(#t~string305.offset)=18446744073709551526, old(#t~string312.base)=18446744073709551523, old(#t~string312.offset)=18446744073709551580, old(#t~string317.base)=18446744073709551623, old(#t~string317.offset)=18446744073709551602, old(#t~string332.base)=18446744073709551598, old(#t~string332.offset)=18446744073709551538, old(#t~string345.base)=18446744073709551512, old(#t~string345.offset)=18446744073709551589, old(#t~string354.base)=18446744073709551514, old(#t~string354.offset)=18446744073709551557, old(#t~string360.base)=18446744073709551616, old(#t~string360.offset)=18446744073709551546, old(#t~string371.base)=18446744073709551591, old(#t~string371.offset)=18446744073709551517, old(#t~string389.base)=18446744073709551502, old(#t~string389.offset)=18446744073709551558, old(#t~string396.base)=18446744073709551542, old(#t~string396.offset)=18446744073709551630, old(#t~string400.base)=18446744073709551505, old(#t~string400.offset)=18446744073709551599, old(#t~string404.base)=18446744073709551497, old(#t~string404.offset)=18446744073709551498, old(#t~string408.base)=18446744073709551492, old(#t~string408.offset)=18446744073709551626, old(#t~string412.base)=18446744073709551541, old(#t~string412.offset)=18446744073709551534, old(#t~string421.base)=18446744073709551579, old(#t~string421.offset)=18446744073709551537, old(#t~string423.base)=18446744073709551573, old(#t~string423.offset)=18446744073709551520, old(#t~string426.base)=18446744073709551576, old(#t~string426.offset)=18446744073709551563, old(#t~string49.base)=18446744073709551600, old(#t~string49.offset)=18446744073709551610, old(#t~string54.base)=18446744073709551518, old(#t~string54.offset)=18446744073709551575, old(~#__key___7~0.base)=18446744073709551504, old(~#__key___7~0.offset)=18446744073709551556, old(~#__key___8~0.base)=18446744073709551613, old(~#__key___8~0.offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0.base)=18446744073709551595, old(~#ems_usb_bittiming_const~0.offset)=18446744073709551608, old(~#ems_usb_driver~0.base)=18446744073709551499, old(~#ems_usb_driver~0.offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0.base)=18446744073709551545, old(~#ems_usb_netdev_ops~0.offset)=18446744073709551547, old(~#ems_usb_table~0.base)=18446744073709551593, old(~#ems_usb_table~0.offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0.base=18446744073709551504, ~#__key___7~0.offset=18446744073709551556, ~#__key___8~0.base=18446744073709551613, ~#__key___8~0.offset=18446744073709551562, ~#ems_usb_bittiming_const~0.base=18446744073709551595, ~#ems_usb_bittiming_const~0.offset=18446744073709551608, ~#ems_usb_driver~0.base=18446744073709551499, ~#ems_usb_driver~0.offset=18446744073709551531, ~#ems_usb_netdev_ops~0.base=18446744073709551545, ~#ems_usb_netdev_ops~0.offset=18446744073709551547, ~#ems_usb_table~0.base=18446744073709551593, ~#ems_usb_table~0.offset=18446744073709551524, ~ldv_coherent_state~0=18446744073709551488, ~LDV_IN_INTERRUPT~0=18446744073709551508, ~ldv_urb_state~0=18446744073709551560, ~res_ems_usb_close_12~0=18446744073709551612, ~res_ems_usb_open_10~0=18446744073709551615, ~res_ems_usb_probe_16~0=18446744073709551500] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L5061] call #t~string12.base, #t~string12.offset := #Ultimate.alloc(26); [L5071] call #t~string14.base, #t~string14.offset := #Ultimate.alloc(65); [L5167] call #t~string26.base, #t~string26.offset := #Ultimate.alloc(8); [L5203] call #t~string30.base, #t~string30.offset := #Ultimate.alloc(24); [L5403] call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25); [L5421] call #t~string54.base, #t~string54.offset := #Ultimate.alloc(34); [L5639] call #t~string195.base, #t~string195.offset := #Ultimate.alloc(21); [L5710] call #t~string212.base, #t~string212.offset := #Ultimate.alloc(14); [L5737] call #t~string220.base, #t~string220.offset := #Ultimate.alloc(39); [L5808] call #t~string232.base, #t~string232.offset := #Ultimate.alloc(21); [L5908] call #t~string257.base, #t~string257.offset := #Ultimate.alloc(25); [L5920] call #t~string262.base, #t~string262.offset := #Ultimate.alloc(31); [L5961] call #t~string273.base, #t~string273.offset := #Ultimate.alloc(26); [L5969] call #t~string276.base, #t~string276.offset := #Ultimate.alloc(28); [L5990] call #t~string287.base, #t~string287.offset := #Ultimate.alloc(28); [L6040] call #t~string295.base, #t~string295.offset := #Ultimate.alloc(29); [L6110] call #t~string305.base, #t~string305.offset := #Ultimate.alloc(27); [L6163] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(25); [L6175] call #t~string317.base, #t~string317.offset := #Ultimate.alloc(31); [L6240] call #t~string332.base, #t~string332.offset := #Ultimate.alloc(28); [L6274] call #t~string345.base, #t~string345.offset := #Ultimate.alloc(18); [L6324] call #t~string354.base, #t~string354.offset := #Ultimate.alloc(21); [L6409] call #t~string360.base, #t~string360.offset := #Ultimate.alloc(22); [L6456] call #t~string371.base, #t~string371.offset := #Ultimate.alloc(33); [L6505] call #t~string389.base, #t~string389.offset := #Ultimate.alloc(32); [L6548] call #t~string396.base, #t~string396.offset := #Ultimate.alloc(25); [L6560] call #t~string400.base, #t~string400.offset := #Ultimate.alloc(28); [L6572] call #t~string404.base, #t~string404.offset := #Ultimate.alloc(26); [L6586] call #t~string408.base, #t~string408.offset := #Ultimate.alloc(36); [L6598] call #t~string412.base, #t~string412.offset := #Ultimate.alloc(34); [L6650] call #t~string421.base, #t~string421.offset := #Ultimate.alloc(8); [L6675] call #t~string423.base, #t~string423.offset := #Ultimate.alloc(33); [L6680] call #t~string426.base, #t~string426.offset := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[0 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[1 := 117]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[2 := 116]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[3 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[4 := 111]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[5 := 114]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[6 := 61]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[7 := 83]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[8 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[9 := 98]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[10 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[11 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[12 := 116]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[13 := 105]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[14 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[15 := 110]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[16 := 32]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[17 := 72]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[18 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[19 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[20 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[21 := 32]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[22 := 60]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[23 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[24 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[25 := 97]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[26 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[27 := 64]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[28 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[29 := 109]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[30 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[31 := 45]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[32 := 119]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[33 := 117]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[34 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[35 := 110]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[36 := 115]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[37 := 99]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[38 := 104]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[39 := 101]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[40 := 46]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[41 := 99]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[42 := 111]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[43 := 109]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[44 := 62]; [L5320-L5333] ~__mod_author31~0 := ~__mod_author31~0[45 := 0]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[0 := 100]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[1 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[2 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[3 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[4 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[5 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[6 := 112]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[7 := 116]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[8 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[9 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[10 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[11 := 61]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[12 := 67]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[13 := 65]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[14 := 78]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[15 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[16 := 100]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[17 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[18 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[19 := 118]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[20 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[21 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[22 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[23 := 102]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[24 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[25 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[26 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[27 := 69]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[28 := 77]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[29 := 83]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[30 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[31 := 68]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[32 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[33 := 46]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[34 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[35 := 84]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[36 := 104]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[37 := 111]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[38 := 109]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[39 := 97]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[40 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[41 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[42 := 87]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[43 := 117]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[44 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[45 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[46 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[47 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[48 := 104]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[49 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[50 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[51 := 67]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[52 := 65]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[53 := 78]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[54 := 47]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[55 := 85]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[56 := 83]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[57 := 66]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[58 := 32]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[59 := 105]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[60 := 110]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[61 := 116]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[62 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[63 := 114]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[64 := 102]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[65 := 97]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[66 := 99]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[67 := 101]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[68 := 115]; [L5334-L5353] ~__mod_description32~0 := ~__mod_description32~0[69 := 0]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[0 := 108]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[1 := 105]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[2 := 99]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[3 := 101]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[4 := 110]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[5 := 115]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[6 := 101]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[7 := 61]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[8 := 71]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[9 := 80]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[10 := 76]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[11 := 32]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[12 := 118]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[13 := 50]; [L5354-L5359] ~__mod_license33~0 := ~__mod_license33~0[14 := 0]; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] call ~#__key___7~0.base, ~#__key___7~0.offset := #Ultimate.alloc(8); [L5173] call write~init~int(0, ~#__key___7~0.base, ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 1 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 2 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 3 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 4 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 5 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 6 + ~#__key___7~0.offset, 1); [L5173] call write~init~int(0, ~#__key___7~0.base, 7 + ~#__key___7~0.offset, 1); [L5174] call ~#__key___8~0.base, ~#__key___8~0.offset := #Ultimate.alloc(8); [L5174] call write~init~int(0, ~#__key___8~0.base, ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 1 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 2 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 3 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 4 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 5 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 6 + ~#__key___8~0.offset, 1); [L5174] call write~init~int(0, ~#__key___8~0.base, 7 + ~#__key___8~0.offset, 1); [L5360-L5362] call ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset := #Ultimate.alloc(24); [L5360-L5362] call write~init~int(3, ~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(4822, ~#ems_usb_table~0.base, 2 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(1092, ~#ems_usb_table~0.base, 4 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 6 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 8 + ~#ems_usb_table~0.offset, 2); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 10 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 11 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 12 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 13 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 14 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 15 + ~#ems_usb_table~0.offset, 1); [L5360-L5362] call write~init~int(0, ~#ems_usb_table~0.base, 16 + ~#ems_usb_table~0.offset, 8); [L6336-L6376] call ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset := #Ultimate.alloc(336); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 8 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_open.base, #funAddr~ems_usb_open.offset, ~#ems_usb_netdev_ops~0.base, 16 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_close.base, #funAddr~ems_usb_close.offset, ~#ems_usb_netdev_ops~0.base, 24 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(#funAddr~ems_usb_start_xmit.base, #funAddr~ems_usb_start_xmit.offset, ~#ems_usb_netdev_ops~0.base, 32 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 40 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 48 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 56 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 64 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 72 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 80 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 88 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 96 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 104 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 112 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 120 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 128 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 136 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 144 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 152 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 160 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 168 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 176 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 184 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 192 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 200 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 208 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 216 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 224 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 232 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 240 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 248 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 256 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 264 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 272 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 280 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 288 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 296 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 304 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 312 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 320 + ~#ems_usb_netdev_ops~0.offset, 8); [L6336-L6376] call write~init~$Pointer$(0, 0, ~#ems_usb_netdev_ops~0.base, 328 + ~#ems_usb_netdev_ops~0.offset, 8); [L6377-L6381] call ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset := #Ultimate.alloc(48); [L6377-L6381] call write~init~int(101, ~#ems_usb_bittiming_const~0.base, ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(109, ~#ems_usb_bittiming_const~0.base, 1 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 2 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(95, ~#ems_usb_bittiming_const~0.base, 3 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(117, ~#ems_usb_bittiming_const~0.base, 4 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(115, ~#ems_usb_bittiming_const~0.base, 5 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(98, ~#ems_usb_bittiming_const~0.base, 6 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 7 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 8 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 9 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 10 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 11 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 12 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 13 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 14 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(0, ~#ems_usb_bittiming_const~0.base, 15 + ~#ems_usb_bittiming_const~0.offset, 1); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 16 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(16, ~#ems_usb_bittiming_const~0.base, 20 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 24 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(8, ~#ems_usb_bittiming_const~0.base, 28 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(4, ~#ems_usb_bittiming_const~0.base, 32 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 36 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(64, ~#ems_usb_bittiming_const~0.base, 40 + ~#ems_usb_bittiming_const~0.offset, 4); [L6377-L6381] call write~init~int(1, ~#ems_usb_bittiming_const~0.base, 44 + ~#ems_usb_bittiming_const~0.offset, 4); [L6649-L6667] call ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset := #Ultimate.alloc(281); [L6649-L6667] call write~init~$Pointer$(#t~string421.base, #t~string421.offset, ~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(#funAddr~ems_usb_probe.base, #funAddr~ems_usb_probe.offset, ~#ems_usb_driver~0.base, 8 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(#funAddr~ems_usb_disconnect.base, #funAddr~ems_usb_disconnect.offset, ~#ems_usb_driver~0.base, 16 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 24 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 32 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 40 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 48 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 56 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 64 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(~#ems_usb_table~0.base, ~#ems_usb_table~0.offset, ~#ems_usb_driver~0.base, 72 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 80 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 84 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 88 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 92 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 100 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 108 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 116 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 124 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 132 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 136 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 144 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 152 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 160 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 168 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 176 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 184 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 192 + ~#ems_usb_driver~0.offset, 1); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 193 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 201 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 209 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 217 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 225 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 233 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 241 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 249 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~$Pointer$(0, 0, ~#ems_usb_driver~0.base, 257 + ~#ems_usb_driver~0.offset, 8); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 265 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 269 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 273 + ~#ems_usb_driver~0.offset, 4); [L6649-L6667] call write~init~int(0, ~#ems_usb_driver~0.base, 277 + ~#ems_usb_driver~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(#NULL.base)=18446744073709551521, old(#NULL.offset)=18446744073709551621, old(#t~string12.base)=18446744073709551528, old(#t~string12.offset)=18446744073709551622, old(#t~string14.base)=18446744073709551516, old(#t~string14.offset)=18446744073709551509, old(#t~string195.base)=18446744073709551619, old(#t~string195.offset)=18446744073709551561, old(#t~string212.base)=18446744073709551510, old(#t~string212.offset)=18446744073709551618, old(#t~string220.base)=18446744073709551552, old(#t~string220.offset)=18446744073709551628, old(#t~string232.base)=18446744073709551584, old(#t~string232.offset)=18446744073709551585, old(#t~string257.base)=18446744073709551489, old(#t~string257.offset)=18446744073709551607, old(#t~string26.base)=18446744073709551570, old(#t~string26.offset)=18446744073709551583, old(#t~string262.base)=18446744073709551529, old(#t~string262.offset)=18446744073709551551, old(#t~string273.base)=18446744073709551605, old(#t~string273.offset)=18446744073709551555, old(#t~string276.base)=18446744073709551569, old(#t~string276.offset)=18446744073709551553, old(#t~string287.base)=18446744073709551565, old(#t~string287.offset)=18446744073709551503, old(#t~string295.base)=18446744073709551496, old(#t~string295.offset)=18446744073709551536, old(#t~string30.base)=18446744073709551603, old(#t~string30.offset)=18446744073709551566, old(#t~string305.base)=18446744073709551535, old(#t~string305.offset)=18446744073709551526, old(#t~string312.base)=18446744073709551523, old(#t~string312.offset)=18446744073709551580, old(#t~string317.base)=18446744073709551623, old(#t~string317.offset)=18446744073709551602, old(#t~string332.base)=18446744073709551598, old(#t~string332.offset)=18446744073709551538, old(#t~string345.base)=18446744073709551512, old(#t~string345.offset)=18446744073709551589, old(#t~string354.base)=18446744073709551514, old(#t~string354.offset)=18446744073709551557, old(#t~string360.base)=18446744073709551616, old(#t~string360.offset)=18446744073709551546, old(#t~string371.base)=18446744073709551591, old(#t~string371.offset)=18446744073709551517, old(#t~string389.base)=18446744073709551502, old(#t~string389.offset)=18446744073709551558, old(#t~string396.base)=18446744073709551542, old(#t~string396.offset)=18446744073709551630, old(#t~string400.base)=18446744073709551505, old(#t~string400.offset)=18446744073709551599, old(#t~string404.base)=18446744073709551497, old(#t~string404.offset)=18446744073709551498, old(#t~string408.base)=18446744073709551492, old(#t~string408.offset)=18446744073709551626, old(#t~string412.base)=18446744073709551541, old(#t~string412.offset)=18446744073709551534, old(#t~string421.base)=18446744073709551579, old(#t~string421.offset)=18446744073709551537, old(#t~string423.base)=18446744073709551573, old(#t~string423.offset)=18446744073709551520, old(#t~string426.base)=18446744073709551576, old(#t~string426.offset)=18446744073709551563, old(#t~string49.base)=18446744073709551600, old(#t~string49.offset)=18446744073709551610, old(#t~string54.base)=18446744073709551518, old(#t~string54.offset)=18446744073709551575, old(~#__key___7~0.base)=18446744073709551504, old(~#__key___7~0.offset)=18446744073709551556, old(~#__key___8~0.base)=18446744073709551613, old(~#__key___8~0.offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0.base)=18446744073709551595, old(~#ems_usb_bittiming_const~0.offset)=18446744073709551608, old(~#ems_usb_driver~0.base)=18446744073709551499, old(~#ems_usb_driver~0.offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0.base)=18446744073709551545, old(~#ems_usb_netdev_ops~0.offset)=18446744073709551547, old(~#ems_usb_table~0.base)=18446744073709551593, old(~#ems_usb_table~0.offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(#NULL.base)=18446744073709551521, old(#NULL.offset)=18446744073709551621, old(#t~string12.base)=18446744073709551528, old(#t~string12.offset)=18446744073709551622, old(#t~string14.base)=18446744073709551516, old(#t~string14.offset)=18446744073709551509, old(#t~string195.base)=18446744073709551619, old(#t~string195.offset)=18446744073709551561, old(#t~string212.base)=18446744073709551510, old(#t~string212.offset)=18446744073709551618, old(#t~string220.base)=18446744073709551552, old(#t~string220.offset)=18446744073709551628, old(#t~string232.base)=18446744073709551584, old(#t~string232.offset)=18446744073709551585, old(#t~string257.base)=18446744073709551489, old(#t~string257.offset)=18446744073709551607, old(#t~string26.base)=18446744073709551570, old(#t~string26.offset)=18446744073709551583, old(#t~string262.base)=18446744073709551529, old(#t~string262.offset)=18446744073709551551, old(#t~string273.base)=18446744073709551605, old(#t~string273.offset)=18446744073709551555, old(#t~string276.base)=18446744073709551569, old(#t~string276.offset)=18446744073709551553, old(#t~string287.base)=18446744073709551565, old(#t~string287.offset)=18446744073709551503, old(#t~string295.base)=18446744073709551496, old(#t~string295.offset)=18446744073709551536, old(#t~string30.base)=18446744073709551603, old(#t~string30.offset)=18446744073709551566, old(#t~string305.base)=18446744073709551535, old(#t~string305.offset)=18446744073709551526, old(#t~string312.base)=18446744073709551523, old(#t~string312.offset)=18446744073709551580, old(#t~string317.base)=18446744073709551623, old(#t~string317.offset)=18446744073709551602, old(#t~string332.base)=18446744073709551598, old(#t~string332.offset)=18446744073709551538, old(#t~string345.base)=18446744073709551512, old(#t~string345.offset)=18446744073709551589, old(#t~string354.base)=18446744073709551514, old(#t~string354.offset)=18446744073709551557, old(#t~string360.base)=18446744073709551616, old(#t~string360.offset)=18446744073709551546, old(#t~string371.base)=18446744073709551591, old(#t~string371.offset)=18446744073709551517, old(#t~string389.base)=18446744073709551502, old(#t~string389.offset)=18446744073709551558, old(#t~string396.base)=18446744073709551542, old(#t~string396.offset)=18446744073709551630, old(#t~string400.base)=18446744073709551505, old(#t~string400.offset)=18446744073709551599, old(#t~string404.base)=18446744073709551497, old(#t~string404.offset)=18446744073709551498, old(#t~string408.base)=18446744073709551492, old(#t~string408.offset)=18446744073709551626, old(#t~string412.base)=18446744073709551541, old(#t~string412.offset)=18446744073709551534, old(#t~string421.base)=18446744073709551579, old(#t~string421.offset)=18446744073709551537, old(#t~string423.base)=18446744073709551573, old(#t~string423.offset)=18446744073709551520, old(#t~string426.base)=18446744073709551576, old(#t~string426.offset)=18446744073709551563, old(#t~string49.base)=18446744073709551600, old(#t~string49.offset)=18446744073709551610, old(#t~string54.base)=18446744073709551518, old(#t~string54.offset)=18446744073709551575, old(~#__key___7~0.base)=18446744073709551504, old(~#__key___7~0.offset)=18446744073709551556, old(~#__key___8~0.base)=18446744073709551613, old(~#__key___8~0.offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0.base)=18446744073709551595, old(~#ems_usb_bittiming_const~0.offset)=18446744073709551608, old(~#ems_usb_driver~0.base)=18446744073709551499, old(~#ems_usb_driver~0.offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0.base)=18446744073709551545, old(~#ems_usb_netdev_ops~0.offset)=18446744073709551547, old(~#ems_usb_table~0.base)=18446744073709551593, old(~#ems_usb_table~0.offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret437 := main(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6730] havoc ~var_group1~0.base, ~var_group1~0.offset; [L6731] havoc ~var_group2~0.base, ~var_group2~0.offset; [L6732] havoc ~var_group3~0.base, ~var_group3~0.offset; [L6733] havoc ~var_ems_usb_probe_16_p1~0.base, ~var_ems_usb_probe_16_p1~0.offset; [L6734] havoc ~tmp___7~27; [L6735] havoc ~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc ~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc ~tmp___8~13; [L6738] havoc ~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] call ldv_initialize(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call #t~ret428 := ems_usb_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6676] CALL call #t~ret424 := usb_register(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset); VAL [#in~driver.base=18446744073709551548, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L5162-L5171] ~driver.base, ~driver.offset := #in~driver.base, #in~driver.offset; [L5163] havoc ~tmp___7~9; [L5167] call #t~ret27 := usb_register_driver(~driver.base, ~driver.offset, ~#__this_module~0.base, ~#__this_module~0.offset, #t~string26.base, #t~string26.offset); [L5167] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L5167] ~tmp___7~9 := #t~ret27; [L5167] havoc #t~ret27; [L5169] #res := ~tmp___7~9; VAL [#in~driver.base=18446744073709551548, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~driver.base=18446744073709551548, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~9=0] [L5162-L5171] ensures true; VAL [#in~driver.base=18446744073709551548, #in~driver.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~driver.base=18446744073709551548, ~driver.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~9=0] [L6676] RET call #t~ret424 := usb_register(~#ems_usb_driver~0.base, ~#ems_usb_driver~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~ret424=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6678-L6685] assume !(0 != ~err~5); [L6686] #res := 0; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6669] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] RET call #t~ret428 := ems_usb_init(); VAL [#NULL.base=0, #NULL.offset=0, #t~ret428=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= #t~ret428 && #t~ret428 <= 2147483647; [L6744] ~tmp___7~27 := #t~ret428; [L6744] havoc #t~ret428; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6746-L6750] assume !(0 != ~tmp___7~27); [L6751] ~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] ~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6754-L6859] assume !false; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___9~5=1] [L6759-L6769] assume 0 != ~tmp___9~5; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___9~5=1] [L6771] assume -2147483648 <= #t~nondet430 && #t~nondet430 <= 2147483647; [L6771] ~tmp___8~13 := #t~nondet430; [L6771] havoc #t~nondet430; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6773-L6858] assume !(0 == ~tmp___8~13); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6776-L6858] assume !(1 == ~tmp___8~13); VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6779-L6858] assume 2 == ~tmp___8~13; VAL [#NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6824] CALL call #t~ret433 := ems_usb_start_xmit(~var_group2~0.base, ~var_group2~0.offset, ~var_group1~0.base, ~var_group1~0.offset); VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6125-L6308] ~skb.base, ~skb.offset := #in~skb.base, #in~skb.offset; [L6125-L6308] ~netdev.base, ~netdev.offset := #in~netdev.base, #in~netdev.offset; [L6126] havoc ~dev~4.base, ~dev~4.offset; [L6127] havoc ~tmp___7~20.base, ~tmp___7~20.offset; [L6128] havoc ~context~1.base, ~context~1.offset; [L6129] havoc ~stats~2.base, ~stats~2.offset; [L6130] havoc ~cf~3.base, ~cf~3.offset; [L6131] havoc ~msg~1.base, ~msg~1.offset; [L6132] havoc ~urb~1.base, ~urb~1.offset; [L6133] havoc ~buf~1.base, ~buf~1.offset; [L6134] havoc ~i~3; [L6135] havoc ~err~3; [L6136] havoc ~size~0; [L6137] havoc ~tmp___8~8; [L6138] havoc ~tmp___9~2.base, ~tmp___9~2.offset; [L6139] havoc ~tmp___10~0; [L6140] havoc ~tmp___11~0; [L6141] havoc ~tmp___12~0; VAL [#in~netdev.base=0, #in~netdev.offset=-520, #in~skb.base=18446744073709551627, #in~skb.offset=0, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev.base=0, ~netdev.offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb.base=18446744073709551627, ~skb.offset=0] [L6145] CALL call #t~ret306.base, #t~ret306.offset := netdev_priv(~netdev.base, ~netdev.offset); VAL [#in~dev.base=0, #in~dev.offset=-520, #NULL.base=0, #NULL.offset=0, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev.base, ~dev.offset := #in~dev.base, #in~dev.offset; [L4983] #res.base, #res.offset := ~dev.base, ~dev.offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); VAL [#in~dev.base=0, #in~dev.offset=-520, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=-520, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ensures true; VAL [#in~dev.base=0, #in~dev.offset=-520, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=-520, #t~string12.base=18446744073709551527, #t~string12.offset=0, #t~string14.base=18446744073709551532, #t~string14.offset=0, #t~string195.base=18446744073709551617, #t~string195.offset=0, #t~string212.base=18446744073709551511, #t~string212.offset=0, #t~string220.base=18446744073709551554, #t~string220.offset=0, #t~string232.base=18446744073709551586, #t~string232.offset=0, #t~string257.base=18446744073709551491, #t~string257.offset=0, #t~string26.base=18446744073709551572, #t~string26.offset=0, #t~string262.base=18446744073709551530, #t~string262.offset=0, #t~string273.base=18446744073709551606, #t~string273.offset=0, #t~string276.base=18446744073709551571, #t~string276.offset=0, #t~string287.base=18446744073709551568, #t~string287.offset=0, #t~string295.base=18446744073709551494, #t~string295.offset=0, #t~string30.base=18446744073709551604, #t~string30.offset=0, #t~string305.base=18446744073709551533, #t~string305.offset=0, #t~string312.base=18446744073709551525, #t~string312.offset=0, #t~string317.base=18446744073709551624, #t~string317.offset=0, #t~string332.base=18446744073709551597, #t~string332.offset=0, #t~string345.base=18446744073709551513, #t~string345.offset=0, #t~string354.base=18446744073709551515, #t~string354.offset=0, #t~string360.base=18446744073709551620, #t~string360.offset=0, #t~string371.base=18446744073709551590, #t~string371.offset=0, #t~string389.base=18446744073709551501, #t~string389.offset=0, #t~string396.base=18446744073709551543, #t~string396.offset=0, #t~string400.base=18446744073709551507, #t~string400.offset=0, #t~string404.base=18446744073709551495, #t~string404.offset=0, #t~string408.base=18446744073709551493, #t~string408.offset=0, #t~string412.base=18446744073709551540, #t~string412.offset=0, #t~string421.base=18446744073709551577, #t~string421.offset=0, #t~string423.base=18446744073709551574, #t~string423.offset=0, #t~string426.base=18446744073709551578, #t~string426.offset=0, #t~string49.base=18446744073709551601, #t~string49.offset=0, #t~string54.base=18446744073709551522, #t~string54.offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0.base=18446744073709551506, ~#__key___7~0.offset=0, ~#__key___8~0.base=18446744073709551611, ~#__key___8~0.offset=0, ~#ems_usb_bittiming_const~0.base=18446744073709551594, ~#ems_usb_bittiming_const~0.offset=0, ~#ems_usb_driver~0.base=18446744073709551548, ~#ems_usb_driver~0.offset=0, ~#ems_usb_netdev_ops~0.base=18446744073709551559, ~#ems_usb_netdev_ops~0.offset=0, ~#ems_usb_table~0.base=18446744073709551592, ~#ems_usb_table~0.offset=0, ~dev.base=0, ~dev.offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [L6151] RET call #t~ret308 := can_dropped_invalid_skb(~netdev, ~skb); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret308=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520] [L6151] assume -2147483648 <= #t~ret308 && #t~ret308 <= 2147483647; [L6151] ~tmp___8~8 := #t~ret308; [L6151] havoc #t~ret308; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0] [L6153-L6157] COND FALSE !(0 != ~tmp___8~8) VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0] [L6159] CALL call #t~ret309 := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1; [L6962] havoc ~tmp___7~29; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6966-L6980] COND FALSE !(false) VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6969] FCALL call #t~ret436 := ldv_undefined_pointer(); [L6969] ~tmp___7~29 := #t~ret436; [L6969] havoc #t~ret436; [L6970] ~arbitrary_memory~1 := ~tmp___7~29; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~1!base=18446744073709551609, ~arbitrary_memory~1!offset=-104, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29!base=18446744073709551609, ~tmp___7~29!offset=-104] [L6972] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res := ~arbitrary_memory~1; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #res!base=18446744073709551609, #res!offset=-104, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~1!base=18446744073709551609, ~arbitrary_memory~1!offset=-104, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29!base=18446744073709551609, ~tmp___7~29!offset=-104] [L6159] RET call #t~ret309 := usb_alloc_urb(0, 32); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret309!base=18446744073709551609, #t~ret309!offset=-104, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0] [L6159] ~urb~1 := #t~ret309; [L6159] havoc #t~ret309; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6161] COND FALSE !(~urb~1 == { base: 0, offset: 0 }) [L6170] FCALL call #t~mem313 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem313!base=18446744073709551544, #t~mem313!offset=18446744073709551588, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6170] CALL call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev := #in~dev; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma := #in~dma; [L6898] havoc ~arbitrary_memory~0; [L6899] havoc ~tmp___7~28; VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6903-L6917] COND FALSE !(false) VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6906] FCALL call #t~ret435 := ldv_undefined_pointer(); [L6906] ~tmp___7~28 := #t~ret435; [L6906] havoc #t~ret435; [L6907] ~arbitrary_memory~0 := ~tmp___7~28; VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~0!base=18446744073709551487, ~arbitrary_memory~0!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28!base=18446744073709551487, ~tmp___7~28!offset=130] [L6909] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res := ~arbitrary_memory~0; VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #res!base=18446744073709551487, #res!offset=130, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~0!base=18446744073709551487, ~arbitrary_memory~0!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28!base=18446744073709551487, ~tmp___7~28!offset=130] [L6170] RET call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem313!base=18446744073709551544, #t~mem313!offset=18446744073709551588, #t~ret314!base=18446744073709551487, #t~ret314!offset=130, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6170] ~tmp___9~2 := #t~ret314; [L6170] havoc #t~ret314; [L6170] havoc #t~mem313; [L6171] ~buf~1 := ~tmp___9~2; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6173] COND FALSE !(~buf~1 == { base: 0, offset: 0 }) [L6182] ~msg~1 := { base: ~buf~1!base, offset: 4 + ~buf~1!offset }; [L6183] FCALL call #t~mem318 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); [L6183] FCALL call write~int(~bitwiseAnd(#t~mem318, 536870911), { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6183] havoc #t~mem318; [L6184] FCALL call #t~mem319 := read~int({ base: ~cf~3!base, offset: 4 + ~cf~3!offset }, 1); [L6184] FCALL call write~int(#t~mem319, { base: ~msg~1!base, offset: 15 + ~msg~1!offset }, 1); [L6184] havoc #t~mem319; [L6185] FCALL call #t~mem320 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem320=18446744073709551567, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6185-L6214] COND TRUE 0 != ~bitwiseAnd(#t~mem320, 1073741824) % 4294967296 [L6185] havoc #t~mem320; [L6186] FCALL call #t~mem321 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem321=18446744073709551567, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6186-L6190] COND TRUE 0 != ~bitwiseAnd(#t~mem321, 2147483648) % 4294967296 [L6186] havoc #t~mem321; [L6187] FCALL call write~int(16, { base: ~msg~1!base, offset: ~msg~1!offset }, 1); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6191] FCALL call write~int(5, { base: ~msg~1!base, offset: 1 + ~msg~1!offset }, 1); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6215] FCALL call #t~mem326 := read~int({ base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] FCALL call write~int(#t~mem326, { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] havoc #t~mem326; [L6216] ~i~3 := 0; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6218-L6232] COND FALSE !(false) VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6220] COND TRUE ~i~3 < 10 VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6225] FCALL call #t~mem327 := read~int({ base: ~dev~4!base, offset: 8 + (520 + ~dev~4!offset + 13 * ~i~3) }, 4); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem327=4294967306, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6225] COND TRUE 10 == #t~mem327 % 4294967296 [L6225] havoc #t~mem327; [L6226] ~context~1 := { base: ~dev~4!base, offset: 520 + ~dev~4!offset + 13 * ~i~3 }; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6236] COND TRUE ~context~1 == { base: 0, offset: 0 } [L6238] FCALL call usb_unanchor_urb(~urb~1); [L6239] FCALL call #t~mem328 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); [L6239] FCALL call #t~mem329 := read~int({ base: ~urb~1!base, offset: 104 + ~urb~1!offset }, 8); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem328!base=18446744073709551544, #t~mem328!offset=18446744073709551588, #t~mem329=18446744073709551629, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6239] CALL call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev := #in~dev; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr := #in~addr; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] COND FALSE !(false) VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932] COND FALSE !(!(0 != (~addr!base + ~addr!offset) % 18446744073709551616)) VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] COND TRUE ~addr != { base: 0, offset: 0 } VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940] COND TRUE ~ldv_coherent_state~0 >= 1 VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem328!base=18446744073709551544, #t~mem328!offset=18446744073709551588, #t~mem329=18446744073709551629, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6239] havoc #t~mem329; [L6239] havoc #t~mem328; [L6240] havoc #t~nondet330; [L6240] FCALL call #t~mem331 := read~$Pointer$({ base: ~netdev!base, offset: 1149 + ~netdev!offset }, 8); [L6240] havoc #t~mem331; [L6242] #res := 16; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #res=16, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6824] RET call #t~ret433 := ems_usb_start_xmit(~var_group2~0, ~var_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret433=16, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6824] assume -2147483648 <= #t~ret433 && #t~ret433 <= 2147483647; [L6824] havoc #t~ret433; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6754-L6859] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6759-L6769] COND FALSE !(0 != ~tmp___9~5) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6762] COND FALSE !(!(0 == ~ldv_s_ems_usb_netdev_ops_net_device_ops~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6765] COND FALSE !(!(0 == ~ldv_s_ems_usb_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] FCALL call usb_deregister(~#ems_usb_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] RET call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6869] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=18446744073709551521, #NULL!offset=18446744073709551621, #t~string12!base=18446744073709551528, #t~string12!offset=18446744073709551622, #t~string14!base=18446744073709551516, #t~string14!offset=18446744073709551509, #t~string195!base=18446744073709551619, #t~string195!offset=18446744073709551561, #t~string212!base=18446744073709551510, #t~string212!offset=18446744073709551618, #t~string220!base=18446744073709551552, #t~string220!offset=18446744073709551628, #t~string232!base=18446744073709551584, #t~string232!offset=18446744073709551585, #t~string257!base=18446744073709551489, #t~string257!offset=18446744073709551607, #t~string26!base=18446744073709551570, #t~string26!offset=18446744073709551583, #t~string262!base=18446744073709551529, #t~string262!offset=18446744073709551551, #t~string273!base=18446744073709551605, #t~string273!offset=18446744073709551555, #t~string276!base=18446744073709551569, #t~string276!offset=18446744073709551553, #t~string287!base=18446744073709551565, #t~string287!offset=18446744073709551503, #t~string295!base=18446744073709551496, #t~string295!offset=18446744073709551536, #t~string30!base=18446744073709551603, #t~string30!offset=18446744073709551566, #t~string305!base=18446744073709551535, #t~string305!offset=18446744073709551526, #t~string312!base=18446744073709551523, #t~string312!offset=18446744073709551580, #t~string317!base=18446744073709551623, #t~string317!offset=18446744073709551602, #t~string332!base=18446744073709551598, #t~string332!offset=18446744073709551538, #t~string345!base=18446744073709551512, #t~string345!offset=18446744073709551589, #t~string354!base=18446744073709551514, #t~string354!offset=18446744073709551557, #t~string360!base=18446744073709551616, #t~string360!offset=18446744073709551546, #t~string371!base=18446744073709551591, #t~string371!offset=18446744073709551517, #t~string389!base=18446744073709551502, #t~string389!offset=18446744073709551558, #t~string396!base=18446744073709551542, #t~string396!offset=18446744073709551630, #t~string400!base=18446744073709551505, #t~string400!offset=18446744073709551599, #t~string404!base=18446744073709551497, #t~string404!offset=18446744073709551498, #t~string408!base=18446744073709551492, #t~string408!offset=18446744073709551626, #t~string412!base=18446744073709551541, #t~string412!offset=18446744073709551534, #t~string421!base=18446744073709551579, #t~string421!offset=18446744073709551537, #t~string423!base=18446744073709551573, #t~string423!offset=18446744073709551520, #t~string426!base=18446744073709551576, #t~string426!offset=18446744073709551563, #t~string49!base=18446744073709551600, #t~string49!offset=18446744073709551610, #t~string54!base=18446744073709551518, #t~string54!offset=18446744073709551575, old(#NULL!base)=18446744073709551521, old(#NULL!offset)=18446744073709551621, old(#t~string12!base)=18446744073709551528, old(#t~string12!offset)=18446744073709551622, old(#t~string14!base)=18446744073709551516, old(#t~string14!offset)=18446744073709551509, old(#t~string195!base)=18446744073709551619, old(#t~string195!offset)=18446744073709551561, old(#t~string212!base)=18446744073709551510, old(#t~string212!offset)=18446744073709551618, old(#t~string220!base)=18446744073709551552, old(#t~string220!offset)=18446744073709551628, old(#t~string232!base)=18446744073709551584, old(#t~string232!offset)=18446744073709551585, old(#t~string257!base)=18446744073709551489, old(#t~string257!offset)=18446744073709551607, old(#t~string26!base)=18446744073709551570, old(#t~string26!offset)=18446744073709551583, old(#t~string262!base)=18446744073709551529, old(#t~string262!offset)=18446744073709551551, old(#t~string273!base)=18446744073709551605, old(#t~string273!offset)=18446744073709551555, old(#t~string276!base)=18446744073709551569, old(#t~string276!offset)=18446744073709551553, old(#t~string287!base)=18446744073709551565, old(#t~string287!offset)=18446744073709551503, old(#t~string295!base)=18446744073709551496, old(#t~string295!offset)=18446744073709551536, old(#t~string30!base)=18446744073709551603, old(#t~string30!offset)=18446744073709551566, old(#t~string305!base)=18446744073709551535, old(#t~string305!offset)=18446744073709551526, old(#t~string312!base)=18446744073709551523, old(#t~string312!offset)=18446744073709551580, old(#t~string317!base)=18446744073709551623, old(#t~string317!offset)=18446744073709551602, old(#t~string332!base)=18446744073709551598, old(#t~string332!offset)=18446744073709551538, old(#t~string345!base)=18446744073709551512, old(#t~string345!offset)=18446744073709551589, old(#t~string354!base)=18446744073709551514, old(#t~string354!offset)=18446744073709551557, old(#t~string360!base)=18446744073709551616, old(#t~string360!offset)=18446744073709551546, old(#t~string371!base)=18446744073709551591, old(#t~string371!offset)=18446744073709551517, old(#t~string389!base)=18446744073709551502, old(#t~string389!offset)=18446744073709551558, old(#t~string396!base)=18446744073709551542, old(#t~string396!offset)=18446744073709551630, old(#t~string400!base)=18446744073709551505, old(#t~string400!offset)=18446744073709551599, old(#t~string404!base)=18446744073709551497, old(#t~string404!offset)=18446744073709551498, old(#t~string408!base)=18446744073709551492, old(#t~string408!offset)=18446744073709551626, old(#t~string412!base)=18446744073709551541, old(#t~string412!offset)=18446744073709551534, old(#t~string421!base)=18446744073709551579, old(#t~string421!offset)=18446744073709551537, old(#t~string423!base)=18446744073709551573, old(#t~string423!offset)=18446744073709551520, old(#t~string426!base)=18446744073709551576, old(#t~string426!offset)=18446744073709551563, old(#t~string49!base)=18446744073709551600, old(#t~string49!offset)=18446744073709551610, old(#t~string54!base)=18446744073709551518, old(#t~string54!offset)=18446744073709551575, old(~#__key___7~0!base)=18446744073709551504, old(~#__key___7~0!offset)=18446744073709551556, old(~#__key___8~0!base)=18446744073709551613, old(~#__key___8~0!offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0!base)=18446744073709551595, old(~#ems_usb_bittiming_const~0!offset)=18446744073709551608, old(~#ems_usb_driver~0!base)=18446744073709551499, old(~#ems_usb_driver~0!offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0!base)=18446744073709551545, old(~#ems_usb_netdev_ops~0!offset)=18446744073709551547, old(~#ems_usb_table~0!base)=18446744073709551593, old(~#ems_usb_table~0!offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0!base=18446744073709551504, ~#__key___7~0!offset=18446744073709551556, ~#__key___8~0!base=18446744073709551613, ~#__key___8~0!offset=18446744073709551562, ~#ems_usb_bittiming_const~0!base=18446744073709551595, ~#ems_usb_bittiming_const~0!offset=18446744073709551608, ~#ems_usb_driver~0!base=18446744073709551499, ~#ems_usb_driver~0!offset=18446744073709551531, ~#ems_usb_netdev_ops~0!base=18446744073709551545, ~#ems_usb_netdev_ops~0!offset=18446744073709551547, ~#ems_usb_table~0!base=18446744073709551593, ~#ems_usb_table~0!offset=18446744073709551524, ~ldv_coherent_state~0=18446744073709551488, ~LDV_IN_INTERRUPT~0=18446744073709551508, ~ldv_urb_state~0=18446744073709551560, ~res_ems_usb_close_12~0=18446744073709551612, ~res_ems_usb_open_10~0=18446744073709551615, ~res_ems_usb_probe_16~0=18446744073709551500] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L5061] FCALL call #t~string12 := #Ultimate.alloc(26); [L5071] FCALL call #t~string14 := #Ultimate.alloc(65); [L5167] FCALL call #t~string26 := #Ultimate.alloc(8); [L5203] FCALL call #t~string30 := #Ultimate.alloc(24); [L5403] FCALL call #t~string49 := #Ultimate.alloc(25); [L5421] FCALL call #t~string54 := #Ultimate.alloc(34); [L5639] FCALL call #t~string195 := #Ultimate.alloc(21); [L5710] FCALL call #t~string212 := #Ultimate.alloc(14); [L5737] FCALL call #t~string220 := #Ultimate.alloc(39); [L5808] FCALL call #t~string232 := #Ultimate.alloc(21); [L5908] FCALL call #t~string257 := #Ultimate.alloc(25); [L5920] FCALL call #t~string262 := #Ultimate.alloc(31); [L5961] FCALL call #t~string273 := #Ultimate.alloc(26); [L5969] FCALL call #t~string276 := #Ultimate.alloc(28); [L5990] FCALL call #t~string287 := #Ultimate.alloc(28); [L6040] FCALL call #t~string295 := #Ultimate.alloc(29); [L6110] FCALL call #t~string305 := #Ultimate.alloc(27); [L6163] FCALL call #t~string312 := #Ultimate.alloc(25); [L6175] FCALL call #t~string317 := #Ultimate.alloc(31); [L6240] FCALL call #t~string332 := #Ultimate.alloc(28); [L6274] FCALL call #t~string345 := #Ultimate.alloc(18); [L6324] FCALL call #t~string354 := #Ultimate.alloc(21); [L6409] FCALL call #t~string360 := #Ultimate.alloc(22); [L6456] FCALL call #t~string371 := #Ultimate.alloc(33); [L6505] FCALL call #t~string389 := #Ultimate.alloc(32); [L6548] FCALL call #t~string396 := #Ultimate.alloc(25); [L6560] FCALL call #t~string400 := #Ultimate.alloc(28); [L6572] FCALL call #t~string404 := #Ultimate.alloc(26); [L6586] FCALL call #t~string408 := #Ultimate.alloc(36); [L6598] FCALL call #t~string412 := #Ultimate.alloc(34); [L6650] FCALL call #t~string421 := #Ultimate.alloc(8); [L6675] FCALL call #t~string423 := #Ultimate.alloc(33); [L6680] FCALL call #t~string426 := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0[0] := 97; [L5320-L5333] ~__mod_author31~0[1] := 117; [L5320-L5333] ~__mod_author31~0[2] := 116; [L5320-L5333] ~__mod_author31~0[3] := 104; [L5320-L5333] ~__mod_author31~0[4] := 111; [L5320-L5333] ~__mod_author31~0[5] := 114; [L5320-L5333] ~__mod_author31~0[6] := 61; [L5320-L5333] ~__mod_author31~0[7] := 83; [L5320-L5333] ~__mod_author31~0[8] := 101; [L5320-L5333] ~__mod_author31~0[9] := 98; [L5320-L5333] ~__mod_author31~0[10] := 97; [L5320-L5333] ~__mod_author31~0[11] := 115; [L5320-L5333] ~__mod_author31~0[12] := 116; [L5320-L5333] ~__mod_author31~0[13] := 105; [L5320-L5333] ~__mod_author31~0[14] := 97; [L5320-L5333] ~__mod_author31~0[15] := 110; [L5320-L5333] ~__mod_author31~0[16] := 32; [L5320-L5333] ~__mod_author31~0[17] := 72; [L5320-L5333] ~__mod_author31~0[18] := 97; [L5320-L5333] ~__mod_author31~0[19] := 97; [L5320-L5333] ~__mod_author31~0[20] := 115; [L5320-L5333] ~__mod_author31~0[21] := 32; [L5320-L5333] ~__mod_author31~0[22] := 60; [L5320-L5333] ~__mod_author31~0[23] := 104; [L5320-L5333] ~__mod_author31~0[24] := 97; [L5320-L5333] ~__mod_author31~0[25] := 97; [L5320-L5333] ~__mod_author31~0[26] := 115; [L5320-L5333] ~__mod_author31~0[27] := 64; [L5320-L5333] ~__mod_author31~0[28] := 101; [L5320-L5333] ~__mod_author31~0[29] := 109; [L5320-L5333] ~__mod_author31~0[30] := 115; [L5320-L5333] ~__mod_author31~0[31] := 45; [L5320-L5333] ~__mod_author31~0[32] := 119; [L5320-L5333] ~__mod_author31~0[33] := 117; [L5320-L5333] ~__mod_author31~0[34] := 101; [L5320-L5333] ~__mod_author31~0[35] := 110; [L5320-L5333] ~__mod_author31~0[36] := 115; [L5320-L5333] ~__mod_author31~0[37] := 99; [L5320-L5333] ~__mod_author31~0[38] := 104; [L5320-L5333] ~__mod_author31~0[39] := 101; [L5320-L5333] ~__mod_author31~0[40] := 46; [L5320-L5333] ~__mod_author31~0[41] := 99; [L5320-L5333] ~__mod_author31~0[42] := 111; [L5320-L5333] ~__mod_author31~0[43] := 109; [L5320-L5333] ~__mod_author31~0[44] := 62; [L5320-L5333] ~__mod_author31~0[45] := 0; [L5334-L5353] ~__mod_description32~0[0] := 100; [L5334-L5353] ~__mod_description32~0[1] := 101; [L5334-L5353] ~__mod_description32~0[2] := 115; [L5334-L5353] ~__mod_description32~0[3] := 99; [L5334-L5353] ~__mod_description32~0[4] := 114; [L5334-L5353] ~__mod_description32~0[5] := 105; [L5334-L5353] ~__mod_description32~0[6] := 112; [L5334-L5353] ~__mod_description32~0[7] := 116; [L5334-L5353] ~__mod_description32~0[8] := 105; [L5334-L5353] ~__mod_description32~0[9] := 111; [L5334-L5353] ~__mod_description32~0[10] := 110; [L5334-L5353] ~__mod_description32~0[11] := 61; [L5334-L5353] ~__mod_description32~0[12] := 67; [L5334-L5353] ~__mod_description32~0[13] := 65; [L5334-L5353] ~__mod_description32~0[14] := 78; [L5334-L5353] ~__mod_description32~0[15] := 32; [L5334-L5353] ~__mod_description32~0[16] := 100; [L5334-L5353] ~__mod_description32~0[17] := 114; [L5334-L5353] ~__mod_description32~0[18] := 105; [L5334-L5353] ~__mod_description32~0[19] := 118; [L5334-L5353] ~__mod_description32~0[20] := 101; [L5334-L5353] ~__mod_description32~0[21] := 114; [L5334-L5353] ~__mod_description32~0[22] := 32; [L5334-L5353] ~__mod_description32~0[23] := 102; [L5334-L5353] ~__mod_description32~0[24] := 111; [L5334-L5353] ~__mod_description32~0[25] := 114; [L5334-L5353] ~__mod_description32~0[26] := 32; [L5334-L5353] ~__mod_description32~0[27] := 69; [L5334-L5353] ~__mod_description32~0[28] := 77; [L5334-L5353] ~__mod_description32~0[29] := 83; [L5334-L5353] ~__mod_description32~0[30] := 32; [L5334-L5353] ~__mod_description32~0[31] := 68; [L5334-L5353] ~__mod_description32~0[32] := 114; [L5334-L5353] ~__mod_description32~0[33] := 46; [L5334-L5353] ~__mod_description32~0[34] := 32; [L5334-L5353] ~__mod_description32~0[35] := 84; [L5334-L5353] ~__mod_description32~0[36] := 104; [L5334-L5353] ~__mod_description32~0[37] := 111; [L5334-L5353] ~__mod_description32~0[38] := 109; [L5334-L5353] ~__mod_description32~0[39] := 97; [L5334-L5353] ~__mod_description32~0[40] := 115; [L5334-L5353] ~__mod_description32~0[41] := 32; [L5334-L5353] ~__mod_description32~0[42] := 87; [L5334-L5353] ~__mod_description32~0[43] := 117; [L5334-L5353] ~__mod_description32~0[44] := 101; [L5334-L5353] ~__mod_description32~0[45] := 110; [L5334-L5353] ~__mod_description32~0[46] := 115; [L5334-L5353] ~__mod_description32~0[47] := 99; [L5334-L5353] ~__mod_description32~0[48] := 104; [L5334-L5353] ~__mod_description32~0[49] := 101; [L5334-L5353] ~__mod_description32~0[50] := 32; [L5334-L5353] ~__mod_description32~0[51] := 67; [L5334-L5353] ~__mod_description32~0[52] := 65; [L5334-L5353] ~__mod_description32~0[53] := 78; [L5334-L5353] ~__mod_description32~0[54] := 47; [L5334-L5353] ~__mod_description32~0[55] := 85; [L5334-L5353] ~__mod_description32~0[56] := 83; [L5334-L5353] ~__mod_description32~0[57] := 66; [L5334-L5353] ~__mod_description32~0[58] := 32; [L5334-L5353] ~__mod_description32~0[59] := 105; [L5334-L5353] ~__mod_description32~0[60] := 110; [L5334-L5353] ~__mod_description32~0[61] := 116; [L5334-L5353] ~__mod_description32~0[62] := 101; [L5334-L5353] ~__mod_description32~0[63] := 114; [L5334-L5353] ~__mod_description32~0[64] := 102; [L5334-L5353] ~__mod_description32~0[65] := 97; [L5334-L5353] ~__mod_description32~0[66] := 99; [L5334-L5353] ~__mod_description32~0[67] := 101; [L5334-L5353] ~__mod_description32~0[68] := 115; [L5334-L5353] ~__mod_description32~0[69] := 0; [L5354-L5359] ~__mod_license33~0[0] := 108; [L5354-L5359] ~__mod_license33~0[1] := 105; [L5354-L5359] ~__mod_license33~0[2] := 99; [L5354-L5359] ~__mod_license33~0[3] := 101; [L5354-L5359] ~__mod_license33~0[4] := 110; [L5354-L5359] ~__mod_license33~0[5] := 115; [L5354-L5359] ~__mod_license33~0[6] := 101; [L5354-L5359] ~__mod_license33~0[7] := 61; [L5354-L5359] ~__mod_license33~0[8] := 71; [L5354-L5359] ~__mod_license33~0[9] := 80; [L5354-L5359] ~__mod_license33~0[10] := 76; [L5354-L5359] ~__mod_license33~0[11] := 32; [L5354-L5359] ~__mod_license33~0[12] := 118; [L5354-L5359] ~__mod_license33~0[13] := 50; [L5354-L5359] ~__mod_license33~0[14] := 0; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] FCALL call ~#__key___7~0 := #Ultimate.alloc(8); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 1 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 2 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 3 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 4 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 5 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 6 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 7 + ~#__key___7~0!offset }, 1); [L5174] FCALL call ~#__key___8~0 := #Ultimate.alloc(8); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 1 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 2 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 3 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 4 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 5 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 6 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 7 + ~#__key___8~0!offset }, 1); [L5360-L5362] FCALL call ~#ems_usb_table~0 := #Ultimate.alloc(24); [L5360-L5362] FCALL call write~init~int(3, { base: ~#ems_usb_table~0!base, offset: ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(4822, { base: ~#ems_usb_table~0!base, offset: 2 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(1092, { base: ~#ems_usb_table~0!base, offset: 4 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 6 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 8 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 10 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 11 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 12 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 13 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 14 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 15 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 16 + ~#ems_usb_table~0!offset }, 8); [L6336-L6376] FCALL call ~#ems_usb_netdev_ops~0 := #Ultimate.alloc(336); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 8 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_open, { base: ~#ems_usb_netdev_ops~0!base, offset: 16 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_close, { base: ~#ems_usb_netdev_ops~0!base, offset: 24 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_start_xmit, { base: ~#ems_usb_netdev_ops~0!base, offset: 32 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 40 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 48 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 56 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 64 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 72 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 80 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 88 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 96 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 104 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 112 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 120 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 128 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 136 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 144 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 152 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 160 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 168 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 176 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 184 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 192 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 200 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 208 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 216 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 224 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 232 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 240 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 248 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 256 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 264 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 272 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 280 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 288 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 296 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 304 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 312 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 320 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 328 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6377-L6381] FCALL call ~#ems_usb_bittiming_const~0 := #Ultimate.alloc(48); [L6377-L6381] FCALL call write~init~int(101, { base: ~#ems_usb_bittiming_const~0!base, offset: ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(109, { base: ~#ems_usb_bittiming_const~0!base, offset: 1 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 2 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(95, { base: ~#ems_usb_bittiming_const~0!base, offset: 3 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(117, { base: ~#ems_usb_bittiming_const~0!base, offset: 4 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 5 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(98, { base: ~#ems_usb_bittiming_const~0!base, offset: 6 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 7 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 8 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 9 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 10 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 11 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 12 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 13 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 14 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 15 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 16 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(16, { base: ~#ems_usb_bittiming_const~0!base, offset: 20 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 24 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(8, { base: ~#ems_usb_bittiming_const~0!base, offset: 28 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(4, { base: ~#ems_usb_bittiming_const~0!base, offset: 32 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 36 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(64, { base: ~#ems_usb_bittiming_const~0!base, offset: 40 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 44 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6649-L6667] FCALL call ~#ems_usb_driver~0 := #Ultimate.alloc(281); [L6649-L6667] FCALL call write~init~$Pointer$(#t~string421, { base: ~#ems_usb_driver~0!base, offset: ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_probe, { base: ~#ems_usb_driver~0!base, offset: 8 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_disconnect, { base: ~#ems_usb_driver~0!base, offset: 16 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 24 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 32 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 40 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 48 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 56 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 64 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(~#ems_usb_table~0, { base: ~#ems_usb_driver~0!base, offset: 72 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 80 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 84 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 88 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 92 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 100 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 108 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 116 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 124 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 132 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 136 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 144 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 152 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 160 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 168 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 176 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 184 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 192 + ~#ems_usb_driver~0!offset }, 1); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 193 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 201 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 209 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 217 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 225 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 233 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 241 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 249 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 257 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 265 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 269 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 273 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 277 + ~#ems_usb_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(#NULL!base)=18446744073709551521, old(#NULL!offset)=18446744073709551621, old(#t~string12!base)=18446744073709551528, old(#t~string12!offset)=18446744073709551622, old(#t~string14!base)=18446744073709551516, old(#t~string14!offset)=18446744073709551509, old(#t~string195!base)=18446744073709551619, old(#t~string195!offset)=18446744073709551561, old(#t~string212!base)=18446744073709551510, old(#t~string212!offset)=18446744073709551618, old(#t~string220!base)=18446744073709551552, old(#t~string220!offset)=18446744073709551628, old(#t~string232!base)=18446744073709551584, old(#t~string232!offset)=18446744073709551585, old(#t~string257!base)=18446744073709551489, old(#t~string257!offset)=18446744073709551607, old(#t~string26!base)=18446744073709551570, old(#t~string26!offset)=18446744073709551583, old(#t~string262!base)=18446744073709551529, old(#t~string262!offset)=18446744073709551551, old(#t~string273!base)=18446744073709551605, old(#t~string273!offset)=18446744073709551555, old(#t~string276!base)=18446744073709551569, old(#t~string276!offset)=18446744073709551553, old(#t~string287!base)=18446744073709551565, old(#t~string287!offset)=18446744073709551503, old(#t~string295!base)=18446744073709551496, old(#t~string295!offset)=18446744073709551536, old(#t~string30!base)=18446744073709551603, old(#t~string30!offset)=18446744073709551566, old(#t~string305!base)=18446744073709551535, old(#t~string305!offset)=18446744073709551526, old(#t~string312!base)=18446744073709551523, old(#t~string312!offset)=18446744073709551580, old(#t~string317!base)=18446744073709551623, old(#t~string317!offset)=18446744073709551602, old(#t~string332!base)=18446744073709551598, old(#t~string332!offset)=18446744073709551538, old(#t~string345!base)=18446744073709551512, old(#t~string345!offset)=18446744073709551589, old(#t~string354!base)=18446744073709551514, old(#t~string354!offset)=18446744073709551557, old(#t~string360!base)=18446744073709551616, old(#t~string360!offset)=18446744073709551546, old(#t~string371!base)=18446744073709551591, old(#t~string371!offset)=18446744073709551517, old(#t~string389!base)=18446744073709551502, old(#t~string389!offset)=18446744073709551558, old(#t~string396!base)=18446744073709551542, old(#t~string396!offset)=18446744073709551630, old(#t~string400!base)=18446744073709551505, old(#t~string400!offset)=18446744073709551599, old(#t~string404!base)=18446744073709551497, old(#t~string404!offset)=18446744073709551498, old(#t~string408!base)=18446744073709551492, old(#t~string408!offset)=18446744073709551626, old(#t~string412!base)=18446744073709551541, old(#t~string412!offset)=18446744073709551534, old(#t~string421!base)=18446744073709551579, old(#t~string421!offset)=18446744073709551537, old(#t~string423!base)=18446744073709551573, old(#t~string423!offset)=18446744073709551520, old(#t~string426!base)=18446744073709551576, old(#t~string426!offset)=18446744073709551563, old(#t~string49!base)=18446744073709551600, old(#t~string49!offset)=18446744073709551610, old(#t~string54!base)=18446744073709551518, old(#t~string54!offset)=18446744073709551575, old(~#__key___7~0!base)=18446744073709551504, old(~#__key___7~0!offset)=18446744073709551556, old(~#__key___8~0!base)=18446744073709551613, old(~#__key___8~0!offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0!base)=18446744073709551595, old(~#ems_usb_bittiming_const~0!offset)=18446744073709551608, old(~#ems_usb_driver~0!base)=18446744073709551499, old(~#ems_usb_driver~0!offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0!base)=18446744073709551545, old(~#ems_usb_netdev_ops~0!offset)=18446744073709551547, old(~#ems_usb_table~0!base)=18446744073709551593, old(~#ems_usb_table~0!offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret437 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6730] havoc ~var_group1~0; [L6731] havoc ~var_group2~0; [L6732] havoc ~var_group3~0; [L6733] havoc ~var_ems_usb_probe_16_p1~0; [L6734] havoc ~tmp___7~27; [L6735] havoc ~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc ~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc ~tmp___8~13; [L6738] havoc ~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call #t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6676] CALL call #t~ret424 := usb_register(~#ems_usb_driver~0); VAL [#in~driver!base=18446744073709551548, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L5162-L5171] ~driver := #in~driver; [L5163] havoc ~tmp___7~9; [L5167] FCALL call #t~ret27 := usb_register_driver(~driver, ~#__this_module~0, #t~string26); [L5167] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L5167] ~tmp___7~9 := #t~ret27; [L5167] havoc #t~ret27; [L5169] #res := ~tmp___7~9; VAL [#in~driver!base=18446744073709551548, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~driver!base=18446744073709551548, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~9=0] [L6676] RET call #t~ret424 := usb_register(~#ems_usb_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret424=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6678-L6685] COND FALSE !(0 != ~err~5) [L6686] #res := 0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] RET call #t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret428=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= #t~ret428 && #t~ret428 <= 2147483647; [L6744] ~tmp___7~27 := #t~ret428; [L6744] havoc #t~ret428; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6746-L6750] COND FALSE !(0 != ~tmp___7~27) [L6751] ~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] ~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6754-L6859] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___9~5=1] [L6759-L6769] COND TRUE 0 != ~tmp___9~5 VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___9~5=1] [L6771] assume -2147483648 <= #t~nondet430 && #t~nondet430 <= 2147483647; [L6771] ~tmp___8~13 := #t~nondet430; [L6771] havoc #t~nondet430; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6773] COND FALSE !(0 == ~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6776] COND FALSE !(1 == ~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6779] COND TRUE 2 == ~tmp___8~13 VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6824] CALL call #t~ret433 := ems_usb_start_xmit(~var_group2~0, ~var_group1~0); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6125-L6308] ~skb := #in~skb; [L6125-L6308] ~netdev := #in~netdev; [L6126] havoc ~dev~4; [L6127] havoc ~tmp___7~20; [L6128] havoc ~context~1; [L6129] havoc ~stats~2; [L6130] havoc ~cf~3; [L6131] havoc ~msg~1; [L6132] havoc ~urb~1; [L6133] havoc ~buf~1; [L6134] havoc ~i~3; [L6135] havoc ~err~3; [L6136] havoc ~size~0; [L6137] havoc ~tmp___8~8; [L6138] havoc ~tmp___9~2; [L6139] havoc ~tmp___10~0; [L6140] havoc ~tmp___11~0; [L6141] havoc ~tmp___12~0; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0] [L6145] CALL call #t~ret306 := netdev_priv(~netdev); VAL [#in~dev!base=0, #in~dev!offset=-520, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev := #in~dev; [L4983] #res := { base: ~dev!base, offset: ~dev!offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; VAL [#in~dev!base=0, #in~dev!offset=-520, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=-520, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] RET call #t~ret306 := netdev_priv(~netdev); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret306!base=0, #t~ret306!offset=-520, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0] [L6145] ~tmp___7~20 := #t~ret306; [L6145] havoc #t~ret306; [L6146] ~dev~4 := ~tmp___7~20; [L6147] ~context~1 := { base: 0, offset: 0 }; [L6148] ~stats~2 := { base: ~netdev!base, offset: 188 + ~netdev!offset }; [L6149] FCALL call #t~mem307 := read~$Pointer$({ base: ~skb!base, offset: 226 + ~skb!offset }, 8); [L6149] ~cf~3 := #t~mem307; [L6149] havoc #t~mem307; [L6150] ~size~0 := 28; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520] [L6151] CALL call #t~ret308 := can_dropped_invalid_skb(~netdev, ~skb); VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L5279-L5308] ~dev := #in~dev; [L5279-L5308] ~skb := #in~skb; [L5280] havoc ~cf~0; [L5281] havoc ~tmp___7~10; [L5282] havoc ~tmp___8~3; [L5285] FCALL call #t~mem34 := read~$Pointer$({ base: ~skb!base, offset: 226 + ~skb!offset }, 8); [L5285] ~cf~0 := #t~mem34; [L5285] havoc #t~mem34; [L5286] FCALL call #t~mem35 := read~int({ base: ~skb!base, offset: 104 + ~skb!offset }, 4); VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4294967309, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0] [L5286] COND FALSE !(13 != #t~mem35 % 4294967296 % 18446744073709551616) [L5286] havoc #t~mem35; [L5289] FCALL call #t~mem36 := read~int({ base: ~cf~0!base, offset: 4 + ~cf~0!offset }, 1); VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0] [L5289] COND FALSE !(#t~mem36 % 256 > 8) [L5289] havoc #t~mem36; [L5292] ~tmp___7~10 := 0; VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0, ~tmp___7~10=0] [L5295] ~tmp___8~3 := ~tmp___7~10; VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0, ~tmp___7~10=0, ~tmp___8~3=0] [L5297-L5305] COND FALSE !(0 != ~tmp___8~3) [L5306] #res := 0; VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0, ~tmp___7~10=0, ~tmp___8~3=0] [L6151] RET call #t~ret308 := can_dropped_invalid_skb(~netdev, ~skb); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret308=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520] [L6151] assume -2147483648 <= #t~ret308 && #t~ret308 <= 2147483647; [L6151] ~tmp___8~8 := #t~ret308; [L6151] havoc #t~ret308; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0] [L6153-L6157] COND FALSE !(0 != ~tmp___8~8) VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0] [L6159] CALL call #t~ret309 := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1; [L6962] havoc ~tmp___7~29; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6966-L6980] COND FALSE !(false) VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6969] FCALL call #t~ret436 := ldv_undefined_pointer(); [L6969] ~tmp___7~29 := #t~ret436; [L6969] havoc #t~ret436; [L6970] ~arbitrary_memory~1 := ~tmp___7~29; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~1!base=18446744073709551609, ~arbitrary_memory~1!offset=-104, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29!base=18446744073709551609, ~tmp___7~29!offset=-104] [L6972] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res := ~arbitrary_memory~1; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #res!base=18446744073709551609, #res!offset=-104, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~1!base=18446744073709551609, ~arbitrary_memory~1!offset=-104, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29!base=18446744073709551609, ~tmp___7~29!offset=-104] [L6159] RET call #t~ret309 := usb_alloc_urb(0, 32); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret309!base=18446744073709551609, #t~ret309!offset=-104, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0] [L6159] ~urb~1 := #t~ret309; [L6159] havoc #t~ret309; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6161] COND FALSE !(~urb~1 == { base: 0, offset: 0 }) [L6170] FCALL call #t~mem313 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem313!base=18446744073709551544, #t~mem313!offset=18446744073709551588, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6170] CALL call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev := #in~dev; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma := #in~dma; [L6898] havoc ~arbitrary_memory~0; [L6899] havoc ~tmp___7~28; VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6903-L6917] COND FALSE !(false) VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6906] FCALL call #t~ret435 := ldv_undefined_pointer(); [L6906] ~tmp___7~28 := #t~ret435; [L6906] havoc #t~ret435; [L6907] ~arbitrary_memory~0 := ~tmp___7~28; VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~0!base=18446744073709551487, ~arbitrary_memory~0!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28!base=18446744073709551487, ~tmp___7~28!offset=130] [L6909] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res := ~arbitrary_memory~0; VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #res!base=18446744073709551487, #res!offset=130, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~0!base=18446744073709551487, ~arbitrary_memory~0!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28!base=18446744073709551487, ~tmp___7~28!offset=130] [L6170] RET call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem313!base=18446744073709551544, #t~mem313!offset=18446744073709551588, #t~ret314!base=18446744073709551487, #t~ret314!offset=130, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6170] ~tmp___9~2 := #t~ret314; [L6170] havoc #t~ret314; [L6170] havoc #t~mem313; [L6171] ~buf~1 := ~tmp___9~2; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6173] COND FALSE !(~buf~1 == { base: 0, offset: 0 }) [L6182] ~msg~1 := { base: ~buf~1!base, offset: 4 + ~buf~1!offset }; [L6183] FCALL call #t~mem318 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); [L6183] FCALL call write~int(~bitwiseAnd(#t~mem318, 536870911), { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6183] havoc #t~mem318; [L6184] FCALL call #t~mem319 := read~int({ base: ~cf~3!base, offset: 4 + ~cf~3!offset }, 1); [L6184] FCALL call write~int(#t~mem319, { base: ~msg~1!base, offset: 15 + ~msg~1!offset }, 1); [L6184] havoc #t~mem319; [L6185] FCALL call #t~mem320 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem320=18446744073709551567, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6185-L6214] COND TRUE 0 != ~bitwiseAnd(#t~mem320, 1073741824) % 4294967296 [L6185] havoc #t~mem320; [L6186] FCALL call #t~mem321 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem321=18446744073709551567, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6186-L6190] COND TRUE 0 != ~bitwiseAnd(#t~mem321, 2147483648) % 4294967296 [L6186] havoc #t~mem321; [L6187] FCALL call write~int(16, { base: ~msg~1!base, offset: ~msg~1!offset }, 1); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6191] FCALL call write~int(5, { base: ~msg~1!base, offset: 1 + ~msg~1!offset }, 1); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6215] FCALL call #t~mem326 := read~int({ base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] FCALL call write~int(#t~mem326, { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] havoc #t~mem326; [L6216] ~i~3 := 0; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6218-L6232] COND FALSE !(false) VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6220] COND TRUE ~i~3 < 10 VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6225] FCALL call #t~mem327 := read~int({ base: ~dev~4!base, offset: 8 + (520 + ~dev~4!offset + 13 * ~i~3) }, 4); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem327=4294967306, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6225] COND TRUE 10 == #t~mem327 % 4294967296 [L6225] havoc #t~mem327; [L6226] ~context~1 := { base: ~dev~4!base, offset: 520 + ~dev~4!offset + 13 * ~i~3 }; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6236] COND TRUE ~context~1 == { base: 0, offset: 0 } [L6238] FCALL call usb_unanchor_urb(~urb~1); [L6239] FCALL call #t~mem328 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); [L6239] FCALL call #t~mem329 := read~int({ base: ~urb~1!base, offset: 104 + ~urb~1!offset }, 8); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem328!base=18446744073709551544, #t~mem328!offset=18446744073709551588, #t~mem329=18446744073709551629, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6239] CALL call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev := #in~dev; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr := #in~addr; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] COND FALSE !(false) VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932] COND FALSE !(!(0 != (~addr!base + ~addr!offset) % 18446744073709551616)) VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] COND TRUE ~addr != { base: 0, offset: 0 } VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940] COND TRUE ~ldv_coherent_state~0 >= 1 VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem328!base=18446744073709551544, #t~mem328!offset=18446744073709551588, #t~mem329=18446744073709551629, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6239] havoc #t~mem329; [L6239] havoc #t~mem328; [L6240] havoc #t~nondet330; [L6240] FCALL call #t~mem331 := read~$Pointer$({ base: ~netdev!base, offset: 1149 + ~netdev!offset }, 8); [L6240] havoc #t~mem331; [L6242] #res := 16; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #res=16, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6824] RET call #t~ret433 := ems_usb_start_xmit(~var_group2~0, ~var_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret433=16, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6824] assume -2147483648 <= #t~ret433 && #t~ret433 <= 2147483647; [L6824] havoc #t~ret433; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6754-L6859] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6759-L6769] COND FALSE !(0 != ~tmp___9~5) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6762] COND FALSE !(!(0 == ~ldv_s_ems_usb_netdev_ops_net_device_ops~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6765] COND FALSE !(!(0 == ~ldv_s_ems_usb_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] FCALL call usb_deregister(~#ems_usb_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] RET call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6869] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] ----- [2018-11-23 04:37:28,842 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551593 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## [2018-11-23 04:37:28,843 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551545 could not be translated for associated CType STRUCT~~net_device_ops?ndo_init~*((*net_device ) : INT)?ndo_uninit~*((*net_device ) : VOID)?ndo_open~*((*net_device ) : INT)?ndo_stop~*((*net_device ) : INT)?ndo_start_xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?ndo_select_queue~*((*net_device *sk_buff ) : ~u16~0)?ndo_change_rx_flags~*((*net_device INT ) : VOID)?ndo_set_rx_mode~*((*net_device ) : VOID)?ndo_set_multicast_list~*((*net_device ) : VOID)?ndo_set_mac_address~*((*net_device *VOID ) : INT)?ndo_validate_addr~*((*net_device ) : INT)?ndo_do_ioctl~*((*net_device *ifreq INT ) : INT)?ndo_set_config~*((*net_device *ifmap ) : INT)?ndo_change_mtu~*((*net_device INT ) : INT)?ndo_neigh_setup~*((*net_device *neigh_parms ) : INT)?ndo_tx_timeout~*((*net_device ) : VOID)?ndo_get_stats64~*((*net_device *rtnl_link_stats64 ) : *rtnl_link_stats64)?ndo_get_stats~*((*net_device ) : *net_device_stats)?ndo_vlan_rx_register~*((*net_device *vlan_group ) : VOID)?ndo_vlan_rx_add_vid~*((*net_device USHORT ) : VOID)?ndo_vlan_rx_kill_vid~*((*net_device USHORT ) : VOID)?ndo_poll_controller~*((*net_device ) : VOID)?ndo_netpoll_setup~*((*net_device *netpoll_info ) : INT)?ndo_netpoll_cleanup~*((*net_device ) : VOID)?ndo_set_vf_mac~*((*net_device INT *~u8~0 ) : INT)?ndo_set_vf_vlan~*((*net_device INT ~u16~0 ~u8~0 ) : INT)?ndo_set_vf_tx_rate~*((*net_device INT INT ) : INT)?ndo_get_vf_config~*((*net_device INT *ifla_vf_info ) : INT)?ndo_set_vf_port~*((*net_device INT **nlattr ) : INT)?ndo_get_vf_port~*((*net_device INT *sk_buff ) : INT)?ndo_setup_tc~*((*net_device ~u8~0 ) : INT)?ndo_fcoe_enable~*((*net_device ) : INT)?ndo_fcoe_disable~*((*net_device ) : INT)?ndo_fcoe_ddp_setup~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_ddp_done~*((*net_device ~u16~0 ) : INT)?ndo_fcoe_ddp_target~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_get_wwn~*((*net_device *~u64~0 INT ) : INT)?ndo_rx_flow_steer~*((*net_device *sk_buff ~u16~0 ~u32~0 ) : INT)?ndo_add_slave~*((*net_device *net_device ) : INT)?ndo_del_slave~*((*net_device *net_device ) : INT)?ndo_fix_features~*((*net_device ~u32~0 ) : ~u32~0)?ndo_set_features~*((*net_device ~u32~0 ) : INT)# [2018-11-23 04:37:28,844 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551499 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# [2018-11-23 04:37:28,844 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551504 could not be translated for associated CType STRUCT~~lock_class_key?subkeys~ARRAY#_8_~STRUCT~~lockdep_subclass_key?__one_byte~CHAR### [2018-11-23 04:37:28,844 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551547 could not be translated for associated CType STRUCT~~net_device_ops?ndo_init~*((*net_device ) : INT)?ndo_uninit~*((*net_device ) : VOID)?ndo_open~*((*net_device ) : INT)?ndo_stop~*((*net_device ) : INT)?ndo_start_xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?ndo_select_queue~*((*net_device *sk_buff ) : ~u16~0)?ndo_change_rx_flags~*((*net_device INT ) : VOID)?ndo_set_rx_mode~*((*net_device ) : VOID)?ndo_set_multicast_list~*((*net_device ) : VOID)?ndo_set_mac_address~*((*net_device *VOID ) : INT)?ndo_validate_addr~*((*net_device ) : INT)?ndo_do_ioctl~*((*net_device *ifreq INT ) : INT)?ndo_set_config~*((*net_device *ifmap ) : INT)?ndo_change_mtu~*((*net_device INT ) : INT)?ndo_neigh_setup~*((*net_device *neigh_parms ) : INT)?ndo_tx_timeout~*((*net_device ) : VOID)?ndo_get_stats64~*((*net_device *rtnl_link_stats64 ) : *rtnl_link_stats64)?ndo_get_stats~*((*net_device ) : *net_device_stats)?ndo_vlan_rx_register~*((*net_device *vlan_group ) : VOID)?ndo_vlan_rx_add_vid~*((*net_device USHORT ) : VOID)?ndo_vlan_rx_kill_vid~*((*net_device USHORT ) : VOID)?ndo_poll_controller~*((*net_device ) : VOID)?ndo_netpoll_setup~*((*net_device *netpoll_info ) : INT)?ndo_netpoll_cleanup~*((*net_device ) : VOID)?ndo_set_vf_mac~*((*net_device INT *~u8~0 ) : INT)?ndo_set_vf_vlan~*((*net_device INT ~u16~0 ~u8~0 ) : INT)?ndo_set_vf_tx_rate~*((*net_device INT INT ) : INT)?ndo_get_vf_config~*((*net_device INT *ifla_vf_info ) : INT)?ndo_set_vf_port~*((*net_device INT **nlattr ) : INT)?ndo_get_vf_port~*((*net_device INT *sk_buff ) : INT)?ndo_setup_tc~*((*net_device ~u8~0 ) : INT)?ndo_fcoe_enable~*((*net_device ) : INT)?ndo_fcoe_disable~*((*net_device ) : INT)?ndo_fcoe_ddp_setup~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_ddp_done~*((*net_device ~u16~0 ) : INT)?ndo_fcoe_ddp_target~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_get_wwn~*((*net_device *~u64~0 INT ) : INT)?ndo_rx_flow_steer~*((*net_device *sk_buff ~u16~0 ~u32~0 ) : INT)?ndo_add_slave~*((*net_device *net_device ) : INT)?ndo_del_slave~*((*net_device *net_device ) : INT)?ndo_fix_features~*((*net_device ~u32~0 ) : ~u32~0)?ndo_set_features~*((*net_device ~u32~0 ) : INT)# [2018-11-23 04:37:28,851 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551556 could not be translated for associated CType STRUCT~~lock_class_key?subkeys~ARRAY#_8_~STRUCT~~lockdep_subclass_key?__one_byte~CHAR### [2018-11-23 04:37:28,851 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551595 could not be translated for associated CType STRUCT~~can_bittiming_const?name~ARRAY#_16_~CHAR#?tseg1_min~~__u32~0?tseg1_max~~__u32~0?tseg2_min~~__u32~0?tseg2_max~~__u32~0?sjw_max~~__u32~0?brp_min~~__u32~0?brp_max~~__u32~0?brp_inc~~__u32~0# [2018-11-23 04:37:28,851 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551524 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## [2018-11-23 04:37:28,851 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551613 could not be translated for associated CType STRUCT~~lock_class_key?subkeys~ARRAY#_8_~STRUCT~~lockdep_subclass_key?__one_byte~CHAR### [2018-11-23 04:37:28,851 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551562 could not be translated for associated CType STRUCT~~lock_class_key?subkeys~ARRAY#_8_~STRUCT~~lockdep_subclass_key?__one_byte~CHAR### [2018-11-23 04:37:28,852 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551608 could not be translated for associated CType STRUCT~~can_bittiming_const?name~ARRAY#_16_~CHAR#?tseg1_min~~__u32~0?tseg1_max~~__u32~0?tseg2_min~~__u32~0?tseg2_max~~__u32~0?sjw_max~~__u32~0?brp_min~~__u32~0?brp_max~~__u32~0?brp_inc~~__u32~0# [2018-11-23 04:37:28,861 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 18446744073709551531 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=18446744073709551521, #NULL!offset=18446744073709551621, #t~string12!base=18446744073709551528, #t~string12!offset=18446744073709551622, #t~string14!base=18446744073709551516, #t~string14!offset=18446744073709551509, #t~string195!base=18446744073709551619, #t~string195!offset=18446744073709551561, #t~string212!base=18446744073709551510, #t~string212!offset=18446744073709551618, #t~string220!base=18446744073709551552, #t~string220!offset=18446744073709551628, #t~string232!base=18446744073709551584, #t~string232!offset=18446744073709551585, #t~string257!base=18446744073709551489, #t~string257!offset=18446744073709551607, #t~string26!base=18446744073709551570, #t~string26!offset=18446744073709551583, #t~string262!base=18446744073709551529, #t~string262!offset=18446744073709551551, #t~string273!base=18446744073709551605, #t~string273!offset=18446744073709551555, #t~string276!base=18446744073709551569, #t~string276!offset=18446744073709551553, #t~string287!base=18446744073709551565, #t~string287!offset=18446744073709551503, #t~string295!base=18446744073709551496, #t~string295!offset=18446744073709551536, #t~string30!base=18446744073709551603, #t~string30!offset=18446744073709551566, #t~string305!base=18446744073709551535, #t~string305!offset=18446744073709551526, #t~string312!base=18446744073709551523, #t~string312!offset=18446744073709551580, #t~string317!base=18446744073709551623, #t~string317!offset=18446744073709551602, #t~string332!base=18446744073709551598, #t~string332!offset=18446744073709551538, #t~string345!base=18446744073709551512, #t~string345!offset=18446744073709551589, #t~string354!base=18446744073709551514, #t~string354!offset=18446744073709551557, #t~string360!base=18446744073709551616, #t~string360!offset=18446744073709551546, #t~string371!base=18446744073709551591, #t~string371!offset=18446744073709551517, #t~string389!base=18446744073709551502, #t~string389!offset=18446744073709551558, #t~string396!base=18446744073709551542, #t~string396!offset=18446744073709551630, #t~string400!base=18446744073709551505, #t~string400!offset=18446744073709551599, #t~string404!base=18446744073709551497, #t~string404!offset=18446744073709551498, #t~string408!base=18446744073709551492, #t~string408!offset=18446744073709551626, #t~string412!base=18446744073709551541, #t~string412!offset=18446744073709551534, #t~string421!base=18446744073709551579, #t~string421!offset=18446744073709551537, #t~string423!base=18446744073709551573, #t~string423!offset=18446744073709551520, #t~string426!base=18446744073709551576, #t~string426!offset=18446744073709551563, #t~string49!base=18446744073709551600, #t~string49!offset=18446744073709551610, #t~string54!base=18446744073709551518, #t~string54!offset=18446744073709551575, old(#NULL!base)=18446744073709551521, old(#NULL!offset)=18446744073709551621, old(#t~string12!base)=18446744073709551528, old(#t~string12!offset)=18446744073709551622, old(#t~string14!base)=18446744073709551516, old(#t~string14!offset)=18446744073709551509, old(#t~string195!base)=18446744073709551619, old(#t~string195!offset)=18446744073709551561, old(#t~string212!base)=18446744073709551510, old(#t~string212!offset)=18446744073709551618, old(#t~string220!base)=18446744073709551552, old(#t~string220!offset)=18446744073709551628, old(#t~string232!base)=18446744073709551584, old(#t~string232!offset)=18446744073709551585, old(#t~string257!base)=18446744073709551489, old(#t~string257!offset)=18446744073709551607, old(#t~string26!base)=18446744073709551570, old(#t~string26!offset)=18446744073709551583, old(#t~string262!base)=18446744073709551529, old(#t~string262!offset)=18446744073709551551, old(#t~string273!base)=18446744073709551605, old(#t~string273!offset)=18446744073709551555, old(#t~string276!base)=18446744073709551569, old(#t~string276!offset)=18446744073709551553, old(#t~string287!base)=18446744073709551565, old(#t~string287!offset)=18446744073709551503, old(#t~string295!base)=18446744073709551496, old(#t~string295!offset)=18446744073709551536, old(#t~string30!base)=18446744073709551603, old(#t~string30!offset)=18446744073709551566, old(#t~string305!base)=18446744073709551535, old(#t~string305!offset)=18446744073709551526, old(#t~string312!base)=18446744073709551523, old(#t~string312!offset)=18446744073709551580, old(#t~string317!base)=18446744073709551623, old(#t~string317!offset)=18446744073709551602, old(#t~string332!base)=18446744073709551598, old(#t~string332!offset)=18446744073709551538, old(#t~string345!base)=18446744073709551512, old(#t~string345!offset)=18446744073709551589, old(#t~string354!base)=18446744073709551514, old(#t~string354!offset)=18446744073709551557, old(#t~string360!base)=18446744073709551616, old(#t~string360!offset)=18446744073709551546, old(#t~string371!base)=18446744073709551591, old(#t~string371!offset)=18446744073709551517, old(#t~string389!base)=18446744073709551502, old(#t~string389!offset)=18446744073709551558, old(#t~string396!base)=18446744073709551542, old(#t~string396!offset)=18446744073709551630, old(#t~string400!base)=18446744073709551505, old(#t~string400!offset)=18446744073709551599, old(#t~string404!base)=18446744073709551497, old(#t~string404!offset)=18446744073709551498, old(#t~string408!base)=18446744073709551492, old(#t~string408!offset)=18446744073709551626, old(#t~string412!base)=18446744073709551541, old(#t~string412!offset)=18446744073709551534, old(#t~string421!base)=18446744073709551579, old(#t~string421!offset)=18446744073709551537, old(#t~string423!base)=18446744073709551573, old(#t~string423!offset)=18446744073709551520, old(#t~string426!base)=18446744073709551576, old(#t~string426!offset)=18446744073709551563, old(#t~string49!base)=18446744073709551600, old(#t~string49!offset)=18446744073709551610, old(#t~string54!base)=18446744073709551518, old(#t~string54!offset)=18446744073709551575, old(~#__key___7~0!base)=18446744073709551504, old(~#__key___7~0!offset)=18446744073709551556, old(~#__key___8~0!base)=18446744073709551613, old(~#__key___8~0!offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0!base)=18446744073709551595, old(~#ems_usb_bittiming_const~0!offset)=18446744073709551608, old(~#ems_usb_driver~0!base)=18446744073709551499, old(~#ems_usb_driver~0!offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0!base)=18446744073709551545, old(~#ems_usb_netdev_ops~0!offset)=18446744073709551547, old(~#ems_usb_table~0!base)=18446744073709551593, old(~#ems_usb_table~0!offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0!base=18446744073709551504, ~#__key___7~0!offset=18446744073709551556, ~#__key___8~0!base=18446744073709551613, ~#__key___8~0!offset=18446744073709551562, ~#ems_usb_bittiming_const~0!base=18446744073709551595, ~#ems_usb_bittiming_const~0!offset=18446744073709551608, ~#ems_usb_driver~0!base=18446744073709551499, ~#ems_usb_driver~0!offset=18446744073709551531, ~#ems_usb_netdev_ops~0!base=18446744073709551545, ~#ems_usb_netdev_ops~0!offset=18446744073709551547, ~#ems_usb_table~0!base=18446744073709551593, ~#ems_usb_table~0!offset=18446744073709551524, ~ldv_coherent_state~0=18446744073709551488, ~LDV_IN_INTERRUPT~0=18446744073709551508, ~ldv_urb_state~0=18446744073709551560, ~res_ems_usb_close_12~0=18446744073709551612, ~res_ems_usb_open_10~0=18446744073709551615, ~res_ems_usb_probe_16~0=18446744073709551500] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L5061] FCALL call #t~string12 := #Ultimate.alloc(26); [L5071] FCALL call #t~string14 := #Ultimate.alloc(65); [L5167] FCALL call #t~string26 := #Ultimate.alloc(8); [L5203] FCALL call #t~string30 := #Ultimate.alloc(24); [L5403] FCALL call #t~string49 := #Ultimate.alloc(25); [L5421] FCALL call #t~string54 := #Ultimate.alloc(34); [L5639] FCALL call #t~string195 := #Ultimate.alloc(21); [L5710] FCALL call #t~string212 := #Ultimate.alloc(14); [L5737] FCALL call #t~string220 := #Ultimate.alloc(39); [L5808] FCALL call #t~string232 := #Ultimate.alloc(21); [L5908] FCALL call #t~string257 := #Ultimate.alloc(25); [L5920] FCALL call #t~string262 := #Ultimate.alloc(31); [L5961] FCALL call #t~string273 := #Ultimate.alloc(26); [L5969] FCALL call #t~string276 := #Ultimate.alloc(28); [L5990] FCALL call #t~string287 := #Ultimate.alloc(28); [L6040] FCALL call #t~string295 := #Ultimate.alloc(29); [L6110] FCALL call #t~string305 := #Ultimate.alloc(27); [L6163] FCALL call #t~string312 := #Ultimate.alloc(25); [L6175] FCALL call #t~string317 := #Ultimate.alloc(31); [L6240] FCALL call #t~string332 := #Ultimate.alloc(28); [L6274] FCALL call #t~string345 := #Ultimate.alloc(18); [L6324] FCALL call #t~string354 := #Ultimate.alloc(21); [L6409] FCALL call #t~string360 := #Ultimate.alloc(22); [L6456] FCALL call #t~string371 := #Ultimate.alloc(33); [L6505] FCALL call #t~string389 := #Ultimate.alloc(32); [L6548] FCALL call #t~string396 := #Ultimate.alloc(25); [L6560] FCALL call #t~string400 := #Ultimate.alloc(28); [L6572] FCALL call #t~string404 := #Ultimate.alloc(26); [L6586] FCALL call #t~string408 := #Ultimate.alloc(36); [L6598] FCALL call #t~string412 := #Ultimate.alloc(34); [L6650] FCALL call #t~string421 := #Ultimate.alloc(8); [L6675] FCALL call #t~string423 := #Ultimate.alloc(33); [L6680] FCALL call #t~string426 := #Ultimate.alloc(51); [L5320-L5333] ~__mod_author31~0[0] := 97; [L5320-L5333] ~__mod_author31~0[1] := 117; [L5320-L5333] ~__mod_author31~0[2] := 116; [L5320-L5333] ~__mod_author31~0[3] := 104; [L5320-L5333] ~__mod_author31~0[4] := 111; [L5320-L5333] ~__mod_author31~0[5] := 114; [L5320-L5333] ~__mod_author31~0[6] := 61; [L5320-L5333] ~__mod_author31~0[7] := 83; [L5320-L5333] ~__mod_author31~0[8] := 101; [L5320-L5333] ~__mod_author31~0[9] := 98; [L5320-L5333] ~__mod_author31~0[10] := 97; [L5320-L5333] ~__mod_author31~0[11] := 115; [L5320-L5333] ~__mod_author31~0[12] := 116; [L5320-L5333] ~__mod_author31~0[13] := 105; [L5320-L5333] ~__mod_author31~0[14] := 97; [L5320-L5333] ~__mod_author31~0[15] := 110; [L5320-L5333] ~__mod_author31~0[16] := 32; [L5320-L5333] ~__mod_author31~0[17] := 72; [L5320-L5333] ~__mod_author31~0[18] := 97; [L5320-L5333] ~__mod_author31~0[19] := 97; [L5320-L5333] ~__mod_author31~0[20] := 115; [L5320-L5333] ~__mod_author31~0[21] := 32; [L5320-L5333] ~__mod_author31~0[22] := 60; [L5320-L5333] ~__mod_author31~0[23] := 104; [L5320-L5333] ~__mod_author31~0[24] := 97; [L5320-L5333] ~__mod_author31~0[25] := 97; [L5320-L5333] ~__mod_author31~0[26] := 115; [L5320-L5333] ~__mod_author31~0[27] := 64; [L5320-L5333] ~__mod_author31~0[28] := 101; [L5320-L5333] ~__mod_author31~0[29] := 109; [L5320-L5333] ~__mod_author31~0[30] := 115; [L5320-L5333] ~__mod_author31~0[31] := 45; [L5320-L5333] ~__mod_author31~0[32] := 119; [L5320-L5333] ~__mod_author31~0[33] := 117; [L5320-L5333] ~__mod_author31~0[34] := 101; [L5320-L5333] ~__mod_author31~0[35] := 110; [L5320-L5333] ~__mod_author31~0[36] := 115; [L5320-L5333] ~__mod_author31~0[37] := 99; [L5320-L5333] ~__mod_author31~0[38] := 104; [L5320-L5333] ~__mod_author31~0[39] := 101; [L5320-L5333] ~__mod_author31~0[40] := 46; [L5320-L5333] ~__mod_author31~0[41] := 99; [L5320-L5333] ~__mod_author31~0[42] := 111; [L5320-L5333] ~__mod_author31~0[43] := 109; [L5320-L5333] ~__mod_author31~0[44] := 62; [L5320-L5333] ~__mod_author31~0[45] := 0; [L5334-L5353] ~__mod_description32~0[0] := 100; [L5334-L5353] ~__mod_description32~0[1] := 101; [L5334-L5353] ~__mod_description32~0[2] := 115; [L5334-L5353] ~__mod_description32~0[3] := 99; [L5334-L5353] ~__mod_description32~0[4] := 114; [L5334-L5353] ~__mod_description32~0[5] := 105; [L5334-L5353] ~__mod_description32~0[6] := 112; [L5334-L5353] ~__mod_description32~0[7] := 116; [L5334-L5353] ~__mod_description32~0[8] := 105; [L5334-L5353] ~__mod_description32~0[9] := 111; [L5334-L5353] ~__mod_description32~0[10] := 110; [L5334-L5353] ~__mod_description32~0[11] := 61; [L5334-L5353] ~__mod_description32~0[12] := 67; [L5334-L5353] ~__mod_description32~0[13] := 65; [L5334-L5353] ~__mod_description32~0[14] := 78; [L5334-L5353] ~__mod_description32~0[15] := 32; [L5334-L5353] ~__mod_description32~0[16] := 100; [L5334-L5353] ~__mod_description32~0[17] := 114; [L5334-L5353] ~__mod_description32~0[18] := 105; [L5334-L5353] ~__mod_description32~0[19] := 118; [L5334-L5353] ~__mod_description32~0[20] := 101; [L5334-L5353] ~__mod_description32~0[21] := 114; [L5334-L5353] ~__mod_description32~0[22] := 32; [L5334-L5353] ~__mod_description32~0[23] := 102; [L5334-L5353] ~__mod_description32~0[24] := 111; [L5334-L5353] ~__mod_description32~0[25] := 114; [L5334-L5353] ~__mod_description32~0[26] := 32; [L5334-L5353] ~__mod_description32~0[27] := 69; [L5334-L5353] ~__mod_description32~0[28] := 77; [L5334-L5353] ~__mod_description32~0[29] := 83; [L5334-L5353] ~__mod_description32~0[30] := 32; [L5334-L5353] ~__mod_description32~0[31] := 68; [L5334-L5353] ~__mod_description32~0[32] := 114; [L5334-L5353] ~__mod_description32~0[33] := 46; [L5334-L5353] ~__mod_description32~0[34] := 32; [L5334-L5353] ~__mod_description32~0[35] := 84; [L5334-L5353] ~__mod_description32~0[36] := 104; [L5334-L5353] ~__mod_description32~0[37] := 111; [L5334-L5353] ~__mod_description32~0[38] := 109; [L5334-L5353] ~__mod_description32~0[39] := 97; [L5334-L5353] ~__mod_description32~0[40] := 115; [L5334-L5353] ~__mod_description32~0[41] := 32; [L5334-L5353] ~__mod_description32~0[42] := 87; [L5334-L5353] ~__mod_description32~0[43] := 117; [L5334-L5353] ~__mod_description32~0[44] := 101; [L5334-L5353] ~__mod_description32~0[45] := 110; [L5334-L5353] ~__mod_description32~0[46] := 115; [L5334-L5353] ~__mod_description32~0[47] := 99; [L5334-L5353] ~__mod_description32~0[48] := 104; [L5334-L5353] ~__mod_description32~0[49] := 101; [L5334-L5353] ~__mod_description32~0[50] := 32; [L5334-L5353] ~__mod_description32~0[51] := 67; [L5334-L5353] ~__mod_description32~0[52] := 65; [L5334-L5353] ~__mod_description32~0[53] := 78; [L5334-L5353] ~__mod_description32~0[54] := 47; [L5334-L5353] ~__mod_description32~0[55] := 85; [L5334-L5353] ~__mod_description32~0[56] := 83; [L5334-L5353] ~__mod_description32~0[57] := 66; [L5334-L5353] ~__mod_description32~0[58] := 32; [L5334-L5353] ~__mod_description32~0[59] := 105; [L5334-L5353] ~__mod_description32~0[60] := 110; [L5334-L5353] ~__mod_description32~0[61] := 116; [L5334-L5353] ~__mod_description32~0[62] := 101; [L5334-L5353] ~__mod_description32~0[63] := 114; [L5334-L5353] ~__mod_description32~0[64] := 102; [L5334-L5353] ~__mod_description32~0[65] := 97; [L5334-L5353] ~__mod_description32~0[66] := 99; [L5334-L5353] ~__mod_description32~0[67] := 101; [L5334-L5353] ~__mod_description32~0[68] := 115; [L5334-L5353] ~__mod_description32~0[69] := 0; [L5354-L5359] ~__mod_license33~0[0] := 108; [L5354-L5359] ~__mod_license33~0[1] := 105; [L5354-L5359] ~__mod_license33~0[2] := 99; [L5354-L5359] ~__mod_license33~0[3] := 101; [L5354-L5359] ~__mod_license33~0[4] := 110; [L5354-L5359] ~__mod_license33~0[5] := 115; [L5354-L5359] ~__mod_license33~0[6] := 101; [L5354-L5359] ~__mod_license33~0[7] := 61; [L5354-L5359] ~__mod_license33~0[8] := 71; [L5354-L5359] ~__mod_license33~0[9] := 80; [L5354-L5359] ~__mod_license33~0[10] := 76; [L5354-L5359] ~__mod_license33~0[11] := 32; [L5354-L5359] ~__mod_license33~0[12] := 118; [L5354-L5359] ~__mod_license33~0[13] := 50; [L5354-L5359] ~__mod_license33~0[14] := 0; [L6725] ~LDV_IN_INTERRUPT~0 := 0; [L6726] ~res_ems_usb_open_10~0 := 0; [L6727] ~res_ems_usb_close_12~0 := 0; [L6728] ~res_ems_usb_probe_16~0 := 0; [L6892] ~ldv_urb_state~0 := 0; [L6893] ~ldv_coherent_state~0 := 0; [L5173] FCALL call ~#__key___7~0 := #Ultimate.alloc(8); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 1 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 2 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 3 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 4 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 5 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 6 + ~#__key___7~0!offset }, 1); [L5173] FCALL call write~init~int(0, { base: ~#__key___7~0!base, offset: 7 + ~#__key___7~0!offset }, 1); [L5174] FCALL call ~#__key___8~0 := #Ultimate.alloc(8); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 1 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 2 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 3 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 4 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 5 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 6 + ~#__key___8~0!offset }, 1); [L5174] FCALL call write~init~int(0, { base: ~#__key___8~0!base, offset: 7 + ~#__key___8~0!offset }, 1); [L5360-L5362] FCALL call ~#ems_usb_table~0 := #Ultimate.alloc(24); [L5360-L5362] FCALL call write~init~int(3, { base: ~#ems_usb_table~0!base, offset: ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(4822, { base: ~#ems_usb_table~0!base, offset: 2 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(1092, { base: ~#ems_usb_table~0!base, offset: 4 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 6 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 8 + ~#ems_usb_table~0!offset }, 2); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 10 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 11 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 12 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 13 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 14 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 15 + ~#ems_usb_table~0!offset }, 1); [L5360-L5362] FCALL call write~init~int(0, { base: ~#ems_usb_table~0!base, offset: 16 + ~#ems_usb_table~0!offset }, 8); [L6336-L6376] FCALL call ~#ems_usb_netdev_ops~0 := #Ultimate.alloc(336); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 8 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_open, { base: ~#ems_usb_netdev_ops~0!base, offset: 16 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_close, { base: ~#ems_usb_netdev_ops~0!base, offset: 24 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$(#funAddr~ems_usb_start_xmit, { base: ~#ems_usb_netdev_ops~0!base, offset: 32 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 40 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 48 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 56 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 64 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 72 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 80 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 88 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 96 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 104 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 112 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 120 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 128 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 136 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 144 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 152 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 160 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 168 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 176 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 184 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 192 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 200 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 208 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 216 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 224 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 232 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 240 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 248 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 256 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 264 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 272 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 280 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 288 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 296 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 304 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 312 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 320 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6336-L6376] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_netdev_ops~0!base, offset: 328 + ~#ems_usb_netdev_ops~0!offset }, 8); [L6377-L6381] FCALL call ~#ems_usb_bittiming_const~0 := #Ultimate.alloc(48); [L6377-L6381] FCALL call write~init~int(101, { base: ~#ems_usb_bittiming_const~0!base, offset: ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(109, { base: ~#ems_usb_bittiming_const~0!base, offset: 1 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 2 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(95, { base: ~#ems_usb_bittiming_const~0!base, offset: 3 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(117, { base: ~#ems_usb_bittiming_const~0!base, offset: 4 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(115, { base: ~#ems_usb_bittiming_const~0!base, offset: 5 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(98, { base: ~#ems_usb_bittiming_const~0!base, offset: 6 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 7 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 8 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 9 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 10 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 11 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 12 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 13 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 14 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(0, { base: ~#ems_usb_bittiming_const~0!base, offset: 15 + ~#ems_usb_bittiming_const~0!offset }, 1); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 16 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(16, { base: ~#ems_usb_bittiming_const~0!base, offset: 20 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 24 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(8, { base: ~#ems_usb_bittiming_const~0!base, offset: 28 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(4, { base: ~#ems_usb_bittiming_const~0!base, offset: 32 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 36 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(64, { base: ~#ems_usb_bittiming_const~0!base, offset: 40 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6377-L6381] FCALL call write~init~int(1, { base: ~#ems_usb_bittiming_const~0!base, offset: 44 + ~#ems_usb_bittiming_const~0!offset }, 4); [L6649-L6667] FCALL call ~#ems_usb_driver~0 := #Ultimate.alloc(281); [L6649-L6667] FCALL call write~init~$Pointer$(#t~string421, { base: ~#ems_usb_driver~0!base, offset: ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_probe, { base: ~#ems_usb_driver~0!base, offset: 8 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(#funAddr~ems_usb_disconnect, { base: ~#ems_usb_driver~0!base, offset: 16 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 24 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 32 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 40 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 48 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 56 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 64 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$(~#ems_usb_table~0, { base: ~#ems_usb_driver~0!base, offset: 72 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 80 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 84 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 88 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 92 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 100 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 108 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 116 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 124 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 132 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 136 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 144 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 152 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 160 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 168 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 176 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 184 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 192 + ~#ems_usb_driver~0!offset }, 1); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 193 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 201 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 209 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 217 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 225 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 233 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 241 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 249 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#ems_usb_driver~0!base, offset: 257 + ~#ems_usb_driver~0!offset }, 8); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 265 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 269 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 273 + ~#ems_usb_driver~0!offset }, 4); [L6649-L6667] FCALL call write~init~int(0, { base: ~#ems_usb_driver~0!base, offset: 277 + ~#ems_usb_driver~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(#NULL!base)=18446744073709551521, old(#NULL!offset)=18446744073709551621, old(#t~string12!base)=18446744073709551528, old(#t~string12!offset)=18446744073709551622, old(#t~string14!base)=18446744073709551516, old(#t~string14!offset)=18446744073709551509, old(#t~string195!base)=18446744073709551619, old(#t~string195!offset)=18446744073709551561, old(#t~string212!base)=18446744073709551510, old(#t~string212!offset)=18446744073709551618, old(#t~string220!base)=18446744073709551552, old(#t~string220!offset)=18446744073709551628, old(#t~string232!base)=18446744073709551584, old(#t~string232!offset)=18446744073709551585, old(#t~string257!base)=18446744073709551489, old(#t~string257!offset)=18446744073709551607, old(#t~string26!base)=18446744073709551570, old(#t~string26!offset)=18446744073709551583, old(#t~string262!base)=18446744073709551529, old(#t~string262!offset)=18446744073709551551, old(#t~string273!base)=18446744073709551605, old(#t~string273!offset)=18446744073709551555, old(#t~string276!base)=18446744073709551569, old(#t~string276!offset)=18446744073709551553, old(#t~string287!base)=18446744073709551565, old(#t~string287!offset)=18446744073709551503, old(#t~string295!base)=18446744073709551496, old(#t~string295!offset)=18446744073709551536, old(#t~string30!base)=18446744073709551603, old(#t~string30!offset)=18446744073709551566, old(#t~string305!base)=18446744073709551535, old(#t~string305!offset)=18446744073709551526, old(#t~string312!base)=18446744073709551523, old(#t~string312!offset)=18446744073709551580, old(#t~string317!base)=18446744073709551623, old(#t~string317!offset)=18446744073709551602, old(#t~string332!base)=18446744073709551598, old(#t~string332!offset)=18446744073709551538, old(#t~string345!base)=18446744073709551512, old(#t~string345!offset)=18446744073709551589, old(#t~string354!base)=18446744073709551514, old(#t~string354!offset)=18446744073709551557, old(#t~string360!base)=18446744073709551616, old(#t~string360!offset)=18446744073709551546, old(#t~string371!base)=18446744073709551591, old(#t~string371!offset)=18446744073709551517, old(#t~string389!base)=18446744073709551502, old(#t~string389!offset)=18446744073709551558, old(#t~string396!base)=18446744073709551542, old(#t~string396!offset)=18446744073709551630, old(#t~string400!base)=18446744073709551505, old(#t~string400!offset)=18446744073709551599, old(#t~string404!base)=18446744073709551497, old(#t~string404!offset)=18446744073709551498, old(#t~string408!base)=18446744073709551492, old(#t~string408!offset)=18446744073709551626, old(#t~string412!base)=18446744073709551541, old(#t~string412!offset)=18446744073709551534, old(#t~string421!base)=18446744073709551579, old(#t~string421!offset)=18446744073709551537, old(#t~string423!base)=18446744073709551573, old(#t~string423!offset)=18446744073709551520, old(#t~string426!base)=18446744073709551576, old(#t~string426!offset)=18446744073709551563, old(#t~string49!base)=18446744073709551600, old(#t~string49!offset)=18446744073709551610, old(#t~string54!base)=18446744073709551518, old(#t~string54!offset)=18446744073709551575, old(~#__key___7~0!base)=18446744073709551504, old(~#__key___7~0!offset)=18446744073709551556, old(~#__key___8~0!base)=18446744073709551613, old(~#__key___8~0!offset)=18446744073709551562, old(~#ems_usb_bittiming_const~0!base)=18446744073709551595, old(~#ems_usb_bittiming_const~0!offset)=18446744073709551608, old(~#ems_usb_driver~0!base)=18446744073709551499, old(~#ems_usb_driver~0!offset)=18446744073709551531, old(~#ems_usb_netdev_ops~0!base)=18446744073709551545, old(~#ems_usb_netdev_ops~0!offset)=18446744073709551547, old(~#ems_usb_table~0!base)=18446744073709551593, old(~#ems_usb_table~0!offset)=18446744073709551524, old(~ldv_coherent_state~0)=18446744073709551488, old(~LDV_IN_INTERRUPT~0)=18446744073709551508, old(~ldv_urb_state~0)=18446744073709551560, old(~res_ems_usb_close_12~0)=18446744073709551612, old(~res_ems_usb_open_10~0)=18446744073709551615, old(~res_ems_usb_probe_16~0)=18446744073709551500, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [?] CALL call #t~ret437 := main(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6730] havoc ~var_group1~0; [L6731] havoc ~var_group2~0; [L6732] havoc ~var_group3~0; [L6733] havoc ~var_ems_usb_probe_16_p1~0; [L6734] havoc ~tmp___7~27; [L6735] havoc ~ldv_s_ems_usb_netdev_ops_net_device_ops~0; [L6736] havoc ~ldv_s_ems_usb_driver_usb_driver~0; [L6737] havoc ~tmp___8~13; [L6738] havoc ~tmp___9~5; [L6742] ~LDV_IN_INTERRUPT~0 := 1; [L6743] FCALL call ldv_initialize(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] CALL call #t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6671] havoc ~err~5; [L6675] havoc #t~nondet422; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6676] CALL call #t~ret424 := usb_register(~#ems_usb_driver~0); VAL [#in~driver!base=18446744073709551548, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L5162-L5171] ~driver := #in~driver; [L5163] havoc ~tmp___7~9; [L5167] FCALL call #t~ret27 := usb_register_driver(~driver, ~#__this_module~0, #t~string26); [L5167] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L5167] ~tmp___7~9 := #t~ret27; [L5167] havoc #t~ret27; [L5169] #res := ~tmp___7~9; VAL [#in~driver!base=18446744073709551548, #in~driver!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~driver!base=18446744073709551548, ~driver!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~9=0] [L6676] RET call #t~ret424 := usb_register(~#ems_usb_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret424=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6676] assume -2147483648 <= #t~ret424 && #t~ret424 <= 2147483647; [L6676] ~err~5 := #t~ret424; [L6676] havoc #t~ret424; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6678-L6685] COND FALSE !(0 != ~err~5) [L6686] #res := 0; VAL [#NULL!base=0, #NULL!offset=0, #res=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~err~5=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] RET call #t~ret428 := ems_usb_init(); VAL [#NULL!base=0, #NULL!offset=0, #t~ret428=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6744] assume -2147483648 <= #t~ret428 && #t~ret428 <= 2147483647; [L6744] ~tmp___7~27 := #t~ret428; [L6744] havoc #t~ret428; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6746-L6750] COND FALSE !(0 != ~tmp___7~27) [L6751] ~ldv_s_ems_usb_netdev_ops_net_device_ops~0 := 0; [L6752] ~ldv_s_ems_usb_driver_usb_driver~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6754-L6859] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0] [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___9~5=1] [L6759-L6769] COND TRUE 0 != ~tmp___9~5 VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___9~5=1] [L6771] assume -2147483648 <= #t~nondet430 && #t~nondet430 <= 2147483647; [L6771] ~tmp___8~13 := #t~nondet430; [L6771] havoc #t~nondet430; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6773] COND FALSE !(0 == ~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6776] COND FALSE !(1 == ~tmp___8~13) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6779] COND TRUE 2 == ~tmp___8~13 VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1] [L6824] CALL call #t~ret433 := ems_usb_start_xmit(~var_group2~0, ~var_group1~0); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6125-L6308] ~skb := #in~skb; [L6125-L6308] ~netdev := #in~netdev; [L6126] havoc ~dev~4; [L6127] havoc ~tmp___7~20; [L6128] havoc ~context~1; [L6129] havoc ~stats~2; [L6130] havoc ~cf~3; [L6131] havoc ~msg~1; [L6132] havoc ~urb~1; [L6133] havoc ~buf~1; [L6134] havoc ~i~3; [L6135] havoc ~err~3; [L6136] havoc ~size~0; [L6137] havoc ~tmp___8~8; [L6138] havoc ~tmp___9~2; [L6139] havoc ~tmp___10~0; [L6140] havoc ~tmp___11~0; [L6141] havoc ~tmp___12~0; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0] [L6145] CALL call #t~ret306 := netdev_priv(~netdev); VAL [#in~dev!base=0, #in~dev!offset=-520, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L4979-L4985] ~dev := #in~dev; [L4983] #res := { base: ~dev!base, offset: ~dev!offset + (if ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 else ~bitwiseAnd(2447, 1152921504606846944) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; VAL [#in~dev!base=0, #in~dev!offset=-520, #NULL!base=0, #NULL!offset=0, #res!base=0, #res!offset=-520, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6145] RET call #t~ret306 := netdev_priv(~netdev); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret306!base=0, #t~ret306!offset=-520, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0] [L6145] ~tmp___7~20 := #t~ret306; [L6145] havoc #t~ret306; [L6146] ~dev~4 := ~tmp___7~20; [L6147] ~context~1 := { base: 0, offset: 0 }; [L6148] ~stats~2 := { base: ~netdev!base, offset: 188 + ~netdev!offset }; [L6149] FCALL call #t~mem307 := read~$Pointer$({ base: ~skb!base, offset: 226 + ~skb!offset }, 8); [L6149] ~cf~3 := #t~mem307; [L6149] havoc #t~mem307; [L6150] ~size~0 := 28; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520] [L6151] CALL call #t~ret308 := can_dropped_invalid_skb(~netdev, ~skb); VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L5279-L5308] ~dev := #in~dev; [L5279-L5308] ~skb := #in~skb; [L5280] havoc ~cf~0; [L5281] havoc ~tmp___7~10; [L5282] havoc ~tmp___8~3; [L5285] FCALL call #t~mem34 := read~$Pointer$({ base: ~skb!base, offset: 226 + ~skb!offset }, 8); [L5285] ~cf~0 := #t~mem34; [L5285] havoc #t~mem34; [L5286] FCALL call #t~mem35 := read~int({ base: ~skb!base, offset: 104 + ~skb!offset }, 4); VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4294967309, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0] [L5286] COND FALSE !(13 != #t~mem35 % 4294967296 % 18446744073709551616) [L5286] havoc #t~mem35; [L5289] FCALL call #t~mem36 := read~int({ base: ~cf~0!base, offset: 4 + ~cf~0!offset }, 1); VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0] [L5289] COND FALSE !(#t~mem36 % 256 > 8) [L5289] havoc #t~mem36; [L5292] ~tmp___7~10 := 0; VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0, ~tmp___7~10=0] [L5295] ~tmp___8~3 := ~tmp___7~10; VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0, ~tmp___7~10=0, ~tmp___8~3=0] [L5297-L5305] COND FALSE !(0 != ~tmp___8~3) [L5306] #res := 0; VAL [#in~dev!base=0, #in~dev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #res=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~0!base=18446744073709551614, ~cf~0!offset=0, ~dev!base=0, ~dev!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~skb!base=18446744073709551627, ~skb!offset=0, ~tmp___7~10=0, ~tmp___8~3=0] [L6151] RET call #t~ret308 := can_dropped_invalid_skb(~netdev, ~skb); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret308=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520] [L6151] assume -2147483648 <= #t~ret308 && #t~ret308 <= 2147483647; [L6151] ~tmp___8~8 := #t~ret308; [L6151] havoc #t~ret308; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0] [L6153-L6157] COND FALSE !(0 != ~tmp___8~8) VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0] [L6159] CALL call #t~ret309 := usb_alloc_urb(0, 32); VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6960-L6986] ~iso_packets := #in~iso_packets; [L6960-L6986] ~mem_flags := #in~mem_flags; [L6961] havoc ~arbitrary_memory~1; [L6962] havoc ~tmp___7~29; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6966-L6980] COND FALSE !(false) VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6969] FCALL call #t~ret436 := ldv_undefined_pointer(); [L6969] ~tmp___7~29 := #t~ret436; [L6969] havoc #t~ret436; [L6970] ~arbitrary_memory~1 := ~tmp___7~29; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~1!base=18446744073709551609, ~arbitrary_memory~1!offset=-104, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=0, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29!base=18446744073709551609, ~tmp___7~29!offset=-104] [L6972] COND FALSE !(~arbitrary_memory~1 == { base: 0, offset: 0 }) [L6977] ~ldv_urb_state~0 := 1 + ~ldv_urb_state~0; [L6978] #res := ~arbitrary_memory~1; VAL [#in~iso_packets=0, #in~mem_flags=32, #NULL!base=0, #NULL!offset=0, #res!base=18446744073709551609, #res!offset=-104, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~1!base=18446744073709551609, ~arbitrary_memory~1!offset=-104, ~iso_packets=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~29!base=18446744073709551609, ~tmp___7~29!offset=-104] [L6159] RET call #t~ret309 := usb_alloc_urb(0, 32); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret309!base=18446744073709551609, #t~ret309!offset=-104, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0] [L6159] ~urb~1 := #t~ret309; [L6159] havoc #t~ret309; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6161] COND FALSE !(~urb~1 == { base: 0, offset: 0 }) [L6170] FCALL call #t~mem313 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem313!base=18446744073709551544, #t~mem313!offset=18446744073709551588, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6170] CALL call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6896-L6923] ~dev := #in~dev; [L6896-L6923] ~size := #in~size; [L6896-L6923] ~mem_flags := #in~mem_flags; [L6896-L6923] ~dma := #in~dma; [L6898] havoc ~arbitrary_memory~0; [L6899] havoc ~tmp___7~28; VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6903-L6917] COND FALSE !(false) VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6906] FCALL call #t~ret435 := ldv_undefined_pointer(); [L6906] ~tmp___7~28 := #t~ret435; [L6906] havoc #t~ret435; [L6907] ~arbitrary_memory~0 := ~tmp___7~28; VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~0!base=18446744073709551487, ~arbitrary_memory~0!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28!base=18446744073709551487, ~tmp___7~28!offset=130] [L6909] COND FALSE !(~arbitrary_memory~0 == { base: 0, offset: 0 }) [L6914] ~ldv_coherent_state~0 := 1 + ~ldv_coherent_state~0; [L6915] #res := ~arbitrary_memory~0; VAL [#in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma!base=18446744073709551609, #in~dma!offset=0, #in~mem_flags=32, #in~size=28, #NULL!base=0, #NULL!offset=0, #res!base=18446744073709551487, #res!offset=130, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~arbitrary_memory~0!base=18446744073709551487, ~arbitrary_memory~0!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma!base=18446744073709551609, ~dma!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~mem_flags=32, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28, ~tmp___7~28!base=18446744073709551487, ~tmp___7~28!offset=130] [L6170] RET call #t~ret314 := usb_alloc_coherent(#t~mem313, ~size~0, 32, { base: ~urb~1!base, offset: 104 + ~urb~1!offset }); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem313!base=18446744073709551544, #t~mem313!offset=18446744073709551588, #t~ret314!base=18446744073709551487, #t~ret314!offset=130, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6170] ~tmp___9~2 := #t~ret314; [L6170] havoc #t~ret314; [L6170] havoc #t~mem313; [L6171] ~buf~1 := ~tmp___9~2; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6173] COND FALSE !(~buf~1 == { base: 0, offset: 0 }) [L6182] ~msg~1 := { base: ~buf~1!base, offset: 4 + ~buf~1!offset }; [L6183] FCALL call #t~mem318 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); [L6183] FCALL call write~int(~bitwiseAnd(#t~mem318, 536870911), { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6183] havoc #t~mem318; [L6184] FCALL call #t~mem319 := read~int({ base: ~cf~3!base, offset: 4 + ~cf~3!offset }, 1); [L6184] FCALL call write~int(#t~mem319, { base: ~msg~1!base, offset: 15 + ~msg~1!offset }, 1); [L6184] havoc #t~mem319; [L6185] FCALL call #t~mem320 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem320=18446744073709551567, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6185-L6214] COND TRUE 0 != ~bitwiseAnd(#t~mem320, 1073741824) % 4294967296 [L6185] havoc #t~mem320; [L6186] FCALL call #t~mem321 := read~int({ base: ~cf~3!base, offset: ~cf~3!offset }, 4); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem321=18446744073709551567, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6186-L6190] COND TRUE 0 != ~bitwiseAnd(#t~mem321, 2147483648) % 4294967296 [L6186] havoc #t~mem321; [L6187] FCALL call write~int(16, { base: ~msg~1!base, offset: ~msg~1!offset }, 1); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6191] FCALL call write~int(5, { base: ~msg~1!base, offset: 1 + ~msg~1!offset }, 1); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6215] FCALL call #t~mem326 := read~int({ base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] FCALL call write~int(#t~mem326, { base: ~msg~1!base, offset: 11 + ~msg~1!offset }, 4); [L6215] havoc #t~mem326; [L6216] ~i~3 := 0; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6218-L6232] COND FALSE !(false) VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6220] COND TRUE ~i~3 < 10 VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6225] FCALL call #t~mem327 := read~int({ base: ~dev~4!base, offset: 8 + (520 + ~dev~4!offset + 13 * ~i~3) }, 4); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem327=4294967306, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6225] COND TRUE 10 == #t~mem327 % 4294967296 [L6225] havoc #t~mem327; [L6226] ~context~1 := { base: ~dev~4!base, offset: 520 + ~dev~4!offset + 13 * ~i~3 }; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6236] COND TRUE ~context~1 == { base: 0, offset: 0 } [L6238] FCALL call usb_unanchor_urb(~urb~1); [L6239] FCALL call #t~mem328 := read~$Pointer$({ base: ~dev~4!base, offset: 336 + ~dev~4!offset }, 8); [L6239] FCALL call #t~mem329 := read~int({ base: ~urb~1!base, offset: 104 + ~urb~1!offset }, 8); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem328!base=18446744073709551544, #t~mem328!offset=18446744073709551588, #t~mem329=18446744073709551629, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6239] CALL call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6925-L6958] ~dev := #in~dev; [L6925-L6958] ~size := #in~size; [L6925-L6958] ~addr := #in~addr; [L6925-L6958] ~dma := #in~dma; VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6930-L6952] COND FALSE !(false) VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6932] COND FALSE !(!(0 != (~addr!base + ~addr!offset) % 18446744073709551616)) VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6939-L6950] COND TRUE ~addr != { base: 0, offset: 0 } VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6940] COND TRUE ~ldv_coherent_state~0 >= 1 VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6947] ~ldv_coherent_state~0 := ~ldv_coherent_state~0 - 1; VAL [#in~addr!base=18446744073709551487, #in~addr!offset=130, #in~dev!base=18446744073709551544, #in~dev!offset=18446744073709551588, #in~dma=18446744073709551629, #in~size=28, #NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=1, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~addr!base=18446744073709551487, ~addr!offset=130, ~dev!base=18446744073709551544, ~dev!offset=18446744073709551588, ~dma=18446744073709551629, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size=28] [L6239] RET call usb_free_coherent(#t~mem328, ~size~0, ~buf~1, #t~mem329); VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem328!base=18446744073709551544, #t~mem328!offset=18446744073709551588, #t~mem329=18446744073709551629, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6239] havoc #t~mem329; [L6239] havoc #t~mem328; [L6240] havoc #t~nondet330; [L6240] FCALL call #t~mem331 := read~$Pointer$({ base: ~netdev!base, offset: 1149 + ~netdev!offset }, 8); [L6240] havoc #t~mem331; [L6242] #res := 16; VAL [#in~netdev!base=0, #in~netdev!offset=-520, #in~skb!base=18446744073709551627, #in~skb!offset=0, #NULL!base=0, #NULL!offset=0, #res=16, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~buf~1!base=18446744073709551487, ~buf~1!offset=130, ~cf~3!base=18446744073709551614, ~cf~3!offset=0, ~context~1!base=0, ~context~1!offset=0, ~dev~4!base=0, ~dev~4!offset=-520, ~i~3=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~msg~1!base=18446744073709551487, ~msg~1!offset=134, ~netdev!base=0, ~netdev!offset=-520, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~size~0=28, ~skb!base=18446744073709551627, ~skb!offset=0, ~stats~2!base=0, ~stats~2!offset=-332, ~tmp___7~20!base=0, ~tmp___7~20!offset=-520, ~tmp___8~8=0, ~tmp___9~2!base=18446744073709551487, ~tmp___9~2!offset=130, ~urb~1!base=18446744073709551609, ~urb~1!offset=-104] [L6824] RET call #t~ret433 := ems_usb_start_xmit(~var_group2~0, ~var_group1~0); VAL [#NULL!base=0, #NULL!offset=0, #t~ret433=16, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6824] assume -2147483648 <= #t~ret433 && #t~ret433 <= 2147483647; [L6824] havoc #t~ret433; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6754-L6859] COND FALSE !(false) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=1, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6757] assume -2147483648 <= #t~nondet429 && #t~nondet429 <= 2147483647; [L6757] ~tmp___9~5 := #t~nondet429; [L6757] havoc #t~nondet429; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6759-L6769] COND FALSE !(0 != ~tmp___9~5) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6762] COND FALSE !(!(0 == ~ldv_s_ems_usb_netdev_ops_net_device_ops~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6765] COND FALSE !(!(0 == ~ldv_s_ems_usb_driver_usb_driver~0)) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6865] CALL call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6696] FCALL call usb_deregister(~#ems_usb_driver~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6865] RET call ems_usb_exit(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_s_ems_usb_driver_usb_driver~0=0, ~ldv_s_ems_usb_netdev_ops_net_device_ops~0=0, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0, ~tmp___7~27=0, ~tmp___8~13=2, ~tmp___9~5=0, ~var_group1~0!base=0, ~var_group1~0!offset=-520, ~var_group2~0!base=18446744073709551627, ~var_group2~0!offset=0] [L6869] CALL call ldv_check_final_state(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7027] COND FALSE !(0 == ~ldv_urb_state~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L7031] CALL call ldv_blast_assert(); VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L6878] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string12!base=18446744073709551527, #t~string12!offset=0, #t~string14!base=18446744073709551532, #t~string14!offset=0, #t~string195!base=18446744073709551617, #t~string195!offset=0, #t~string212!base=18446744073709551511, #t~string212!offset=0, #t~string220!base=18446744073709551554, #t~string220!offset=0, #t~string232!base=18446744073709551586, #t~string232!offset=0, #t~string257!base=18446744073709551491, #t~string257!offset=0, #t~string26!base=18446744073709551572, #t~string26!offset=0, #t~string262!base=18446744073709551530, #t~string262!offset=0, #t~string273!base=18446744073709551606, #t~string273!offset=0, #t~string276!base=18446744073709551571, #t~string276!offset=0, #t~string287!base=18446744073709551568, #t~string287!offset=0, #t~string295!base=18446744073709551494, #t~string295!offset=0, #t~string30!base=18446744073709551604, #t~string30!offset=0, #t~string305!base=18446744073709551533, #t~string305!offset=0, #t~string312!base=18446744073709551525, #t~string312!offset=0, #t~string317!base=18446744073709551624, #t~string317!offset=0, #t~string332!base=18446744073709551597, #t~string332!offset=0, #t~string345!base=18446744073709551513, #t~string345!offset=0, #t~string354!base=18446744073709551515, #t~string354!offset=0, #t~string360!base=18446744073709551620, #t~string360!offset=0, #t~string371!base=18446744073709551590, #t~string371!offset=0, #t~string389!base=18446744073709551501, #t~string389!offset=0, #t~string396!base=18446744073709551543, #t~string396!offset=0, #t~string400!base=18446744073709551507, #t~string400!offset=0, #t~string404!base=18446744073709551495, #t~string404!offset=0, #t~string408!base=18446744073709551493, #t~string408!offset=0, #t~string412!base=18446744073709551540, #t~string412!offset=0, #t~string421!base=18446744073709551577, #t~string421!offset=0, #t~string423!base=18446744073709551574, #t~string423!offset=0, #t~string426!base=18446744073709551578, #t~string426!offset=0, #t~string49!base=18446744073709551601, #t~string49!offset=0, #t~string54!base=18446744073709551522, #t~string54!offset=0, old(~ldv_coherent_state~0)=0, old(~LDV_IN_INTERRUPT~0)=0, old(~ldv_urb_state~0)=0, old(~res_ems_usb_close_12~0)=0, old(~res_ems_usb_open_10~0)=0, old(~res_ems_usb_probe_16~0)=0, ~#__key___7~0!base=18446744073709551506, ~#__key___7~0!offset=0, ~#__key___8~0!base=18446744073709551611, ~#__key___8~0!offset=0, ~#ems_usb_bittiming_const~0!base=18446744073709551594, ~#ems_usb_bittiming_const~0!offset=0, ~#ems_usb_driver~0!base=18446744073709551548, ~#ems_usb_driver~0!offset=0, ~#ems_usb_netdev_ops~0!base=18446744073709551559, ~#ems_usb_netdev_ops~0!offset=0, ~#ems_usb_table~0!base=18446744073709551592, ~#ems_usb_table~0!offset=0, ~ldv_coherent_state~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_urb_state~0=1, ~res_ems_usb_close_12~0=0, ~res_ems_usb_open_10~0=0, ~res_ems_usb_probe_16~0=0] [L5320-L5333] static char const __mod_author31[46] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'a', (char const )'u', (char const )'t', (char const )'h', (char const )'o', (char const )'r', (char const )'=', (char const )'S', (char const )'e', (char const )'b', (char const )'a', (char const )'s', (char const )'t', (char const )'i', (char const )'a', (char const )'n', (char const )' ', (char const )'H', (char const )'a', (char const )'a', (char const )'s', (char const )' ', (char const )'<', (char const )'h', (char const )'a', (char const )'a', (char const )'s', (char const )'@', (char const )'e', (char const )'m', (char const )'s', (char const )'-', (char const )'w', (char const )'u', (char const )'e', (char const )'n', (char const )'s', (char const )'c', (char const )'h', (char const )'e', (char const )'.', (char const )'c', (char const )'o', (char const )'m', (char const )'>', (char const )'\000'}; [L5334-L5353] static char const __mod_description32[70] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'d', (char const )'e', (char const )'s', (char const )'c', (char const )'r', (char const )'i', (char const )'p', (char const )'t', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'C', (char const )'A', (char const )'N', (char const )' ', (char const )'d', (char const )'r', (char const )'i', (char const )'v', (char const )'e', (char const )'r', (char const )' ', (char const )'f', (char const )'o', (char const )'r', (char const )' ', (char const )'E', (char const )'M', (char const )'S', (char const )' ', (char const )'D', (char const )'r', (char const )'.', (char const )' ', (char const )'T', (char const )'h', (char const )'o', (char const )'m', (char const )'a', (char const )'s', (char const )' ', (char const )'W', (char const )'u', (char const )'e', (char const )'n', (char const )'s', (char const )'c', (char const )'h', (char const )'e', (char const )' ', (char const )'C', (char const )'A', (char const )'N', (char const )'/', (char const )'U', (char const )'S', (char const )'B', (char const )' ', (char const )'i', (char const )'n', (char const )'t', (char const )'e', (char const )'r', (char const )'f', (char const )'a', (char const )'c', (char const )'e', (char const )'s', (char const )'\000'}; [L5354-L5359] static char const __mod_license33[15] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'l', (char const )'i', (char const )'c', (char const )'e', (char const )'n', (char const )'s', (char const )'e', (char const )'=', (char const )'G', (char const )'P', (char const )'L', (char const )' ', (char const )'v', (char const )'2', (char const )'\000'}; [L6725] int LDV_IN_INTERRUPT ; [L6726] static int res_ems_usb_open_10 ; [L6727] static int res_ems_usb_close_12 ; [L6728] static int res_ems_usb_probe_16 ; [L6892] int ldv_urb_state = 0; [L6893] int ldv_coherent_state = 0; [L5173] static struct lock_class_key __key___7 ; [L5174] static struct lock_class_key __key___8 ; [L5360-L5362] static struct usb_device_id ems_usb_table[1] = { {(__u16 )3, (__u16 )4822, (__u16 )1092, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L6336-L6376] static struct net_device_ops const ems_usb_netdev_ops = {(int (*)(struct net_device *dev ))0, (void (*)(struct net_device *dev ))0, & ems_usb_open, & ems_usb_close, & ems_usb_start_xmit, (u16 (*)(struct net_device *dev , struct sk_buff *skb ))0, (void (*)(struct net_device *dev , int flags ))0, (void (*)(struct net_device *dev ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , void *addr ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , struct ifreq *ifr , int cmd ))0, (int (*)(struct net_device *dev , struct ifmap *map ))0, (int (*)(struct net_device *dev , int new_mtu ))0, (int (*)(struct net_device *dev , struct neigh_parms * ))0, (void (*)(struct net_device *dev ))0, (struct rtnl_link_stats64 *(*)(struct net_device *dev , struct rtnl_link_stats64 *storage ))0, (struct net_device_stats *(*)(struct net_device *dev ))0, (void (*)(struct net_device *dev , struct vlan_group *grp ))0, (void (*)(struct net_device *dev , unsigned short vid ))0, (void (*)(struct net_device *dev , unsigned short vid ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , struct netpoll_info *info ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , int queue , u8 *mac ))0, (int (*)(struct net_device *dev , int queue , u16 vlan , u8 qos ))0, (int (*)(struct net_device *dev , int vf , int rate ))0, (int (*)(struct net_device *dev , int vf , struct ifla_vf_info *ivf ))0, (int (*)(struct net_device *dev , int vf , struct nlattr **port ))0, (int (*)(struct net_device *dev , int vf , struct sk_buff *skb ))0, (int (*)(struct net_device *dev , u8 tc ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , u16 xid , struct scatterlist *sgl , unsigned int sgc ))0, (int (*)(struct net_device *dev , u16 xid ))0, (int (*)(struct net_device *dev , u16 xid , struct scatterlist *sgl , unsigned int sgc ))0, (int (*)(struct net_device *dev , u64 *wwn , int type ))0, (int (*)(struct net_device *dev , struct sk_buff const *skb , u16 rxq_index , u32 flow_id ))0, (int (*)(struct net_device *dev , struct net_device *slave_dev ))0, (int (*)(struct net_device *dev , struct net_device *slave_dev ))0, (u32 (*)(struct net_device *dev , u32 features ))0, (int (*)(struct net_device *dev , u32 features ))0}; [L6377-L6381] static struct can_bittiming_const ems_usb_bittiming_const = {{(char )'e', (char )'m', (char )'s', (char )'_', (char )'u', (char )'s', (char )'b', (char )'\000', (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, (__u32 )1, (__u32 )16, (__u32 )1, (__u32 )8, (__u32 )4, (__u32 )1, (__u32 )64, (__u32 )1}; [L6649-L6667] static struct usb_driver ems_usb_driver = {"ems_usb", & ems_usb_probe, & ems_usb_disconnect, (int (*)(struct usb_interface *intf , unsigned int code , void *buf ))0, (int (*)(struct usb_interface *intf , pm_message_t message ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (struct usb_device_id const *)(ems_usb_table), {{{{{0U}, 0U, 0U, (void *)0, {(struct lock_class_key *)0, {(struct lock_class *)0, (struct lock_class *)0}, (char const *)0, 0, 0UL}}}}, {(struct list_head *)0, (struct list_head *)0}}, {{(char const *)0, (struct bus_type *)0, (struct module *)0, (char const *)0, (_Bool)0, (struct of_device_id const *)0, (int (*)(struct device *dev ))0, (int (*)(struct device *dev ))0, (void (*)(struct device *dev ))0, (int (*)(struct device *dev , pm_message_t state ))0, (int (*)(struct device *dev ))0, (struct attribute_group const **)0, (struct dev_pm_ops const *)0, (struct driver_private *)0}, 0}, 0U, 0U, 0U}; VAL [\old(__key___7)=null, \old(__key___7)=null, \old(__key___8)=null, \old(__key___8)=null, \old(ems_usb_bittiming_const)=null, \old(ems_usb_bittiming_const)=null, \old(ems_usb_driver)=null, \old(ems_usb_driver)=null, \old(ems_usb_netdev_ops)=null, \old(ems_usb_netdev_ops)=null, \old(ems_usb_table)=null, \old(ems_usb_table)=null, \old(ldv_coherent_state)=18446744073709551488, \old(LDV_IN_INTERRUPT)=18446744073709551508, \old(ldv_urb_state)=18446744073709551560, \old(res_ems_usb_close_12)=18446744073709551612, \old(res_ems_usb_open_10)=18446744073709551615, \old(res_ems_usb_probe_16)=18446744073709551500, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6730] struct net_device *var_group1 ; [L6731] struct sk_buff *var_group2 ; [L6732] struct usb_interface *var_group3 ; [L6733] struct usb_device_id const *var_ems_usb_probe_16_p1 ; [L6734] int tmp___7 ; [L6735] int ldv_s_ems_usb_netdev_ops_net_device_ops ; [L6736] int ldv_s_ems_usb_driver_usb_driver ; [L6737] int tmp___8 ; [L6738] int tmp___9 ; [L6742] LDV_IN_INTERRUPT = 1 [L6744] CALL, EXPR ems_usb_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6671] int err ; [L6676] CALL, EXPR usb_register(& ems_usb_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, driver={18446744073709551548:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L5163] int tmp___7 ; [L5167] tmp___7 = usb_register_driver(driver, & __this_module, "ems_usb") [L5169] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, driver={18446744073709551548:0}, driver={18446744073709551548:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0] [L6676] RET, EXPR usb_register(& ems_usb_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, usb_register(& ems_usb_driver)=0] [L6676] err = usb_register(& ems_usb_driver) [L6678] COND FALSE !(\read(err)) [L6686] return (0); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, err=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6744] RET, EXPR ems_usb_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_init()=0, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6744] tmp___7 = ems_usb_init() [L6746] COND FALSE !(\read(tmp___7)) [L6751] ldv_s_ems_usb_netdev_ops_net_device_ops = 0 [L6752] ldv_s_ems_usb_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0] [L6754] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0] [L6757] tmp___9 = __VERIFIER_nondet_int() [L6759] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___9=1] [L6771] tmp___8 = __VERIFIER_nondet_int() [L6773] COND FALSE !(tmp___8 == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1] [L6776] COND FALSE !(tmp___8 == 1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1] [L6779] COND TRUE tmp___8 == 2 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1] [L6824] CALL ems_usb_start_xmit(var_group2, var_group1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}] [L6126] struct ems_usb *dev ; [L6127] void *tmp___7 ; [L6128] struct ems_tx_urb_context *context ; [L6129] struct net_device_stats *stats ; [L6130] struct can_frame *cf ; [L6131] struct ems_cpc_msg *msg ; [L6132] struct urb *urb ; [L6133] u8 *buf ; [L6134] int i ; [L6135] int err ; [L6136] size_t size ; [L6137] int tmp___8 ; [L6138] void *tmp___9 ; [L6139] unsigned int tmp___10 ; [L6140] int tmp___11 ; [L6141] long tmp___12 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}] [L6145] CALL, EXPR netdev_priv((struct net_device const *)netdev) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L4983] return ((void *)((char *)dev + ((sizeof(struct net_device ) + 31UL) & 0x0fffffffffffffe0UL))); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result={0:-520}, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6145] RET, EXPR netdev_priv((struct net_device const *)netdev) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, netdev_priv((struct net_device const *)netdev)={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}] [L6145] tmp___7 = netdev_priv((struct net_device const *)netdev) [L6146] dev = (struct ems_usb *)tmp___7 [L6147] context = (struct ems_tx_urb_context *)((void *)0) [L6148] stats = & netdev->stats [L6149] EXPR skb->data [L6149] cf = (struct can_frame *)skb->data [L6150] size = 15UL + sizeof(struct cpc_can_msg ) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}] [L6151] CALL, EXPR can_dropped_invalid_skb(netdev, skb) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}] [L5280] struct can_frame const *cf ; [L5281] int tmp___7 ; [L5282] long tmp___8 ; [L5285] EXPR skb->data [L5285] cf = (struct can_frame const *)((struct can_frame *)skb->data) [L5286] EXPR skb->len VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}, skb->len=4294967309] [L5286] COND FALSE !((unsigned long )skb->len != sizeof(*cf)) [L5289] EXPR cf->can_dlc VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, cf->can_dlc=0, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}] [L5289] COND FALSE !((int const )cf->can_dlc > 8) [L5292] tmp___7 = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}, tmp___7=0] [L5295] tmp___8 = __builtin_expect((long )tmp___7, 0L) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}, tmp___7=0, tmp___8=0] [L5297] COND FALSE !(\read(tmp___8)) [L5306] return (0); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}, tmp___7=0, tmp___8=0] [L6151] RET, EXPR can_dropped_invalid_skb(netdev, skb) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, can_dropped_invalid_skb(netdev, skb)=0, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}] [L6151] tmp___8 = can_dropped_invalid_skb(netdev, skb) [L6153] COND FALSE !(\read(tmp___8)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0] [L6159] CALL, EXPR usb_alloc_urb(0, 32U) VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6961] void *arbitrary_memory ; [L6962] void *tmp___7 ; VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, iso_packets=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6966] COND TRUE 1 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, iso_packets=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6969] tmp___7 = ldv_undefined_pointer() [L6970] arbitrary_memory = tmp___7 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, arbitrary_memory={18446744073709551609:-104}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, iso_packets=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7={18446744073709551609:-104}] [L6972] COND FALSE !(! arbitrary_memory) [L6977] ldv_urb_state = ldv_urb_state + 1 [L6978] return ((struct urb *)arbitrary_memory); VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result={18446744073709551609:-104}, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, arbitrary_memory={18446744073709551609:-104}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, iso_packets=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7={18446744073709551609:-104}] [L6159] RET, EXPR usb_alloc_urb(0, 32U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, usb_alloc_urb(0, 32U)={18446744073709551609:-104}] [L6159] urb = usb_alloc_urb(0, 32U) [L6161] COND FALSE !(! urb) [L6170] EXPR dev->udev VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->udev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, urb={18446744073709551609:-104}] [L6170] CALL, EXPR usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6898] void *arbitrary_memory ; [L6899] void *tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6903] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6906] tmp___7 = ldv_undefined_pointer() [L6907] arbitrary_memory = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, arbitrary_memory={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, tmp___7={18446744073709551487:130}] [L6909] COND FALSE !(! arbitrary_memory) [L6914] ldv_coherent_state = ldv_coherent_state + 1 [L6915] return (arbitrary_memory); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, \result={18446744073709551487:130}, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, arbitrary_memory={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, tmp___7={18446744073709551487:130}] [L6170] RET, EXPR usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->udev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, urb={18446744073709551609:-104}, usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma)={18446744073709551487:130}] [L6170] tmp___9 = usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) [L6171] buf = (u8 *)tmp___9 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6173] COND FALSE !(! buf) [L6182] msg = (struct ems_cpc_msg *)(buf + 4) [L6183] EXPR cf->can_id [L6183] msg->msg.can_msg.id = cf->can_id & 536870911U [L6184] EXPR cf->can_dlc [L6184] msg->msg.can_msg.length = cf->can_dlc [L6185] EXPR cf->can_id VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, cf->can_id=18446744073709551567, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6185] COND TRUE cf->can_id & 1073741824U [L6186] EXPR cf->can_id VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, cf->can_id=18446744073709551567, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6186] COND TRUE cf->can_id & 2147483648U [L6187] msg->type = (u8 )16 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6191] msg->length = (u8 )5 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6215] EXPR msg->msg.can_msg.id [L6215] msg->msg.can_msg.id = msg->msg.can_msg.id [L6216] i = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6218] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6220] COND TRUE i < 10 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6225] EXPR dev->tx_contexts[i].echo_index VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->tx_contexts[i].echo_index=4294967306, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6225] COND TRUE dev->tx_contexts[i].echo_index == 10U [L6226] context = & dev->tx_contexts[i] VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6236] COND TRUE ! context [L6239] EXPR dev->udev [L6239] EXPR urb->transfer_dma VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->udev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}, urb->transfer_dma=18446744073709551629] [L6239] CALL usb_free_coherent(dev->udev, size, (void *)buf, urb->transfer_dma) VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6930] COND TRUE 1 VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6932] COND FALSE !(! ((unsigned long )addr != (unsigned long )((void *)0))) VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6939] COND TRUE \read(*addr) VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6940] COND TRUE ldv_coherent_state >= 1 VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6947] ldv_coherent_state = ldv_coherent_state - 1 VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6239] RET usb_free_coherent(dev->udev, size, (void *)buf, urb->transfer_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->udev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}, urb->transfer_dma=18446744073709551629] [L6240] netdev->dev.parent [L6242] return ((netdev_tx_t )16); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result=16, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6824] RET ems_usb_start_xmit(var_group2, var_group1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_start_xmit(var_group2, var_group1)=16, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6754] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6757] tmp___9 = __VERIFIER_nondet_int() [L6759] COND FALSE !(\read(tmp___9)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=0, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6762] COND FALSE !(! (ldv_s_ems_usb_netdev_ops_net_device_ops == 0)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=0, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6765] COND FALSE !(! (ldv_s_ems_usb_driver_usb_driver == 0)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=0, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6865] CALL ems_usb_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6865] RET ems_usb_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=0, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6869] CALL ldv_check_final_state() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L7027] COND FALSE !(ldv_urb_state == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L7031] CALL ldv_blast_assert() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6878] __VERIFIER_error() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] ----- [2018-11-23 04:37:31,286 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 04:37:31 BoogieIcfgContainer [2018-11-23 04:37:31,286 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 04:37:31,287 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 04:37:31,287 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 04:37:31,287 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 04:37:31,287 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:36:47" (3/4) ... [2018-11-23 04:37:31,294 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 04:37:31,294 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 04:37:31,295 INFO L168 Benchmark]: Toolchain (without parser) took 48972.26 ms. Allocated memory was 1.0 GB in the beginning and 1.7 GB in the end (delta: 716.2 MB). Free memory was 945.0 MB in the beginning and 984.8 MB in the end (delta: -39.8 MB). Peak memory consumption was 676.4 MB. Max. memory is 11.5 GB. [2018-11-23 04:37:31,296 INFO L168 Benchmark]: CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 979.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 04:37:31,296 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1307.39 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 172.0 MB). Free memory was 945.0 MB in the beginning and 966.8 MB in the end (delta: -21.8 MB). Peak memory consumption was 171.5 MB. Max. memory is 11.5 GB. [2018-11-23 04:37:31,297 INFO L168 Benchmark]: Boogie Procedure Inliner took 51.30 ms. Allocated memory is still 1.2 GB. Free memory was 966.8 MB in the beginning and 963.2 MB in the end (delta: 3.6 MB). Peak memory consumption was 3.6 MB. Max. memory is 11.5 GB. [2018-11-23 04:37:31,297 INFO L168 Benchmark]: Boogie Preprocessor took 83.59 ms. Allocated memory is still 1.2 GB. Free memory was 963.2 MB in the beginning and 952.5 MB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 11.5 GB. [2018-11-23 04:37:31,297 INFO L168 Benchmark]: RCFGBuilder took 4218.14 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 157.8 MB). Free memory was 952.5 MB in the beginning and 1.1 GB in the end (delta: -123.5 MB). Peak memory consumption was 252.6 MB. Max. memory is 11.5 GB. [2018-11-23 04:37:31,298 INFO L168 Benchmark]: TraceAbstraction took 43301.24 ms. Allocated memory was 1.4 GB in the beginning and 1.7 GB in the end (delta: 386.4 MB). Free memory was 1.1 GB in the beginning and 984.8 MB in the end (delta: 91.2 MB). Peak memory consumption was 477.6 MB. Max. memory is 11.5 GB. [2018-11-23 04:37:31,298 INFO L168 Benchmark]: Witness Printer took 7.34 ms. Allocated memory is still 1.7 GB. Free memory is still 984.8 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 04:37:31,303 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 979.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1307.39 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 172.0 MB). Free memory was 945.0 MB in the beginning and 966.8 MB in the end (delta: -21.8 MB). Peak memory consumption was 171.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 51.30 ms. Allocated memory is still 1.2 GB. Free memory was 966.8 MB in the beginning and 963.2 MB in the end (delta: 3.6 MB). Peak memory consumption was 3.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 83.59 ms. Allocated memory is still 1.2 GB. Free memory was 963.2 MB in the beginning and 952.5 MB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 4218.14 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 157.8 MB). Free memory was 952.5 MB in the beginning and 1.1 GB in the end (delta: -123.5 MB). Peak memory consumption was 252.6 MB. Max. memory is 11.5 GB. * TraceAbstraction took 43301.24 ms. Allocated memory was 1.4 GB in the beginning and 1.7 GB in the end (delta: 386.4 MB). Free memory was 1.1 GB in the beginning and 984.8 MB in the end (delta: 91.2 MB). Peak memory consumption was 477.6 MB. Max. memory is 11.5 GB. * Witness Printer took 7.34 ms. Allocated memory is still 1.7 GB. Free memory is still 984.8 MB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551593 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551545 could not be translated for associated CType STRUCT~~net_device_ops?ndo_init~*((*net_device ) : INT)?ndo_uninit~*((*net_device ) : VOID)?ndo_open~*((*net_device ) : INT)?ndo_stop~*((*net_device ) : INT)?ndo_start_xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?ndo_select_queue~*((*net_device *sk_buff ) : ~u16~0)?ndo_change_rx_flags~*((*net_device INT ) : VOID)?ndo_set_rx_mode~*((*net_device ) : VOID)?ndo_set_multicast_list~*((*net_device ) : VOID)?ndo_set_mac_address~*((*net_device *VOID ) : INT)?ndo_validate_addr~*((*net_device ) : INT)?ndo_do_ioctl~*((*net_device *ifreq INT ) : INT)?ndo_set_config~*((*net_device *ifmap ) : INT)?ndo_change_mtu~*((*net_device INT ) : INT)?ndo_neigh_setup~*((*net_device *neigh_parms ) : INT)?ndo_tx_timeout~*((*net_device ) : VOID)?ndo_get_stats64~*((*net_device *rtnl_link_stats64 ) : *rtnl_link_stats64)?ndo_get_stats~*((*net_device ) : *net_device_stats)?ndo_vlan_rx_register~*((*net_device *vlan_group ) : VOID)?ndo_vlan_rx_add_vid~*((*net_device USHORT ) : VOID)?ndo_vlan_rx_kill_vid~*((*net_device USHORT ) : VOID)?ndo_poll_controller~*((*net_device ) : VOID)?ndo_netpoll_setup~*((*net_device *netpoll_info ) : INT)?ndo_netpoll_cleanup~*((*net_device ) : VOID)?ndo_set_vf_mac~*((*net_device INT *~u8~0 ) : INT)?ndo_set_vf_vlan~*((*net_device INT ~u16~0 ~u8~0 ) : INT)?ndo_set_vf_tx_rate~*((*net_device INT INT ) : INT)?ndo_get_vf_config~*((*net_device INT *ifla_vf_info ) : INT)?ndo_set_vf_port~*((*net_device INT **nlattr ) : INT)?ndo_get_vf_port~*((*net_device INT *sk_buff ) : INT)?ndo_setup_tc~*((*net_device ~u8~0 ) : INT)?ndo_fcoe_enable~*((*net_device ) : INT)?ndo_fcoe_disable~*((*net_device ) : INT)?ndo_fcoe_ddp_setup~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_ddp_done~*((*net_device ~u16~0 ) : INT)?ndo_fcoe_ddp_target~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_get_wwn~*((*net_device *~u64~0 INT ) : INT)?ndo_rx_flow_steer~*((*net_device *sk_buff ~u16~0 ~u32~0 ) : INT)?ndo_add_slave~*((*net_device *net_device ) : INT)?ndo_del_slave~*((*net_device *net_device ) : INT)?ndo_fix_features~*((*net_device ~u32~0 ) : ~u32~0)?ndo_set_features~*((*net_device ~u32~0 ) : INT)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551499 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551504 could not be translated for associated CType STRUCT~~lock_class_key?subkeys~ARRAY#_8_~STRUCT~~lockdep_subclass_key?__one_byte~CHAR### - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551547 could not be translated for associated CType STRUCT~~net_device_ops?ndo_init~*((*net_device ) : INT)?ndo_uninit~*((*net_device ) : VOID)?ndo_open~*((*net_device ) : INT)?ndo_stop~*((*net_device ) : INT)?ndo_start_xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?ndo_select_queue~*((*net_device *sk_buff ) : ~u16~0)?ndo_change_rx_flags~*((*net_device INT ) : VOID)?ndo_set_rx_mode~*((*net_device ) : VOID)?ndo_set_multicast_list~*((*net_device ) : VOID)?ndo_set_mac_address~*((*net_device *VOID ) : INT)?ndo_validate_addr~*((*net_device ) : INT)?ndo_do_ioctl~*((*net_device *ifreq INT ) : INT)?ndo_set_config~*((*net_device *ifmap ) : INT)?ndo_change_mtu~*((*net_device INT ) : INT)?ndo_neigh_setup~*((*net_device *neigh_parms ) : INT)?ndo_tx_timeout~*((*net_device ) : VOID)?ndo_get_stats64~*((*net_device *rtnl_link_stats64 ) : *rtnl_link_stats64)?ndo_get_stats~*((*net_device ) : *net_device_stats)?ndo_vlan_rx_register~*((*net_device *vlan_group ) : VOID)?ndo_vlan_rx_add_vid~*((*net_device USHORT ) : VOID)?ndo_vlan_rx_kill_vid~*((*net_device USHORT ) : VOID)?ndo_poll_controller~*((*net_device ) : VOID)?ndo_netpoll_setup~*((*net_device *netpoll_info ) : INT)?ndo_netpoll_cleanup~*((*net_device ) : VOID)?ndo_set_vf_mac~*((*net_device INT *~u8~0 ) : INT)?ndo_set_vf_vlan~*((*net_device INT ~u16~0 ~u8~0 ) : INT)?ndo_set_vf_tx_rate~*((*net_device INT INT ) : INT)?ndo_get_vf_config~*((*net_device INT *ifla_vf_info ) : INT)?ndo_set_vf_port~*((*net_device INT **nlattr ) : INT)?ndo_get_vf_port~*((*net_device INT *sk_buff ) : INT)?ndo_setup_tc~*((*net_device ~u8~0 ) : INT)?ndo_fcoe_enable~*((*net_device ) : INT)?ndo_fcoe_disable~*((*net_device ) : INT)?ndo_fcoe_ddp_setup~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_ddp_done~*((*net_device ~u16~0 ) : INT)?ndo_fcoe_ddp_target~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_get_wwn~*((*net_device *~u64~0 INT ) : INT)?ndo_rx_flow_steer~*((*net_device *sk_buff ~u16~0 ~u32~0 ) : INT)?ndo_add_slave~*((*net_device *net_device ) : INT)?ndo_del_slave~*((*net_device *net_device ) : INT)?ndo_fix_features~*((*net_device ~u32~0 ) : ~u32~0)?ndo_set_features~*((*net_device ~u32~0 ) : INT)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551556 could not be translated for associated CType STRUCT~~lock_class_key?subkeys~ARRAY#_8_~STRUCT~~lockdep_subclass_key?__one_byte~CHAR### - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551595 could not be translated for associated CType STRUCT~~can_bittiming_const?name~ARRAY#_16_~CHAR#?tseg1_min~~__u32~0?tseg1_max~~__u32~0?tseg2_min~~__u32~0?tseg2_max~~__u32~0?sjw_max~~__u32~0?brp_min~~__u32~0?brp_max~~__u32~0?brp_inc~~__u32~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551524 could not be translated for associated CType ARRAY#_1_~STRUCT~~usb_device_id?match_flags~~__u16~0?idVendor~~__u16~0?idProduct~~__u16~0?bcdDevice_lo~~__u16~0?bcdDevice_hi~~__u16~0?bDeviceClass~~__u8~0?bDeviceSubClass~~__u8~0?bDeviceProtocol~~__u8~0?bInterfaceClass~~__u8~0?bInterfaceSubClass~~__u8~0?bInterfaceProtocol~~__u8~0?driver_info~~kernel_ulong_t~0## - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551613 could not be translated for associated CType STRUCT~~lock_class_key?subkeys~ARRAY#_8_~STRUCT~~lockdep_subclass_key?__one_byte~CHAR### - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551562 could not be translated for associated CType STRUCT~~lock_class_key?subkeys~ARRAY#_8_~STRUCT~~lockdep_subclass_key?__one_byte~CHAR### - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551608 could not be translated for associated CType STRUCT~~can_bittiming_const?name~ARRAY#_16_~CHAR#?tseg1_min~~__u32~0?tseg1_max~~__u32~0?tseg2_min~~__u32~0?tseg2_max~~__u32~0?sjw_max~~__u32~0?brp_min~~__u32~0?brp_max~~__u32~0?brp_inc~~__u32~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 18446744073709551531 could not be translated for associated CType STRUCT~~usb_driver?name~*CHAR?probe~*((*usb_interface *usb_device_id ) : INT)?disconnect~*((*usb_interface ) : VOID)?unlocked_ioctl~*((*usb_interface UINT *VOID ) : INT)?suspend~*((*usb_interface ~pm_message_t~0 ) : INT)?resume~*((*usb_interface ) : INT)?reset_resume~*((*usb_interface ) : INT)?pre_reset~*((*usb_interface ) : INT)?post_reset~*((*usb_interface ) : INT)?id_table~*usb_device_id?dynids~STRUCT~~usb_dynids?lock~~spinlock_t~0?list~STRUCT~~list_head?next~*list_head?prev~*list_head##?drvwrap~STRUCT~~usbdrv_wrap?driver~STRUCT~~device_driver?name~*CHAR?bus~*bus_type?owner~*module?mod_name~*CHAR?suppress_bind_attrs~~bool~0?of_match_table~*of_device_id?probe~*((*device ) : INT)?remove~*((*device ) : INT)?shutdown~*((*device ) : VOID)?suspend~*((*device ~pm_message_t~0 ) : INT)?resume~*((*device ) : INT)?groups~**attribute_group?pm~*dev_pm_ops?p~*driver_private#?for_devices~INT#?no_dynamic_id~UINT?supports_autosuspend~UINT?soft_unbind~UINT# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 6878]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 5167, overapproximation of bitwiseAnd at line 6186. Possible FailurePath: [L5320-L5333] static char const __mod_author31[46] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'a', (char const )'u', (char const )'t', (char const )'h', (char const )'o', (char const )'r', (char const )'=', (char const )'S', (char const )'e', (char const )'b', (char const )'a', (char const )'s', (char const )'t', (char const )'i', (char const )'a', (char const )'n', (char const )' ', (char const )'H', (char const )'a', (char const )'a', (char const )'s', (char const )' ', (char const )'<', (char const )'h', (char const )'a', (char const )'a', (char const )'s', (char const )'@', (char const )'e', (char const )'m', (char const )'s', (char const )'-', (char const )'w', (char const )'u', (char const )'e', (char const )'n', (char const )'s', (char const )'c', (char const )'h', (char const )'e', (char const )'.', (char const )'c', (char const )'o', (char const )'m', (char const )'>', (char const )'\000'}; [L5334-L5353] static char const __mod_description32[70] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'d', (char const )'e', (char const )'s', (char const )'c', (char const )'r', (char const )'i', (char const )'p', (char const )'t', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'C', (char const )'A', (char const )'N', (char const )' ', (char const )'d', (char const )'r', (char const )'i', (char const )'v', (char const )'e', (char const )'r', (char const )' ', (char const )'f', (char const )'o', (char const )'r', (char const )' ', (char const )'E', (char const )'M', (char const )'S', (char const )' ', (char const )'D', (char const )'r', (char const )'.', (char const )' ', (char const )'T', (char const )'h', (char const )'o', (char const )'m', (char const )'a', (char const )'s', (char const )' ', (char const )'W', (char const )'u', (char const )'e', (char const )'n', (char const )'s', (char const )'c', (char const )'h', (char const )'e', (char const )' ', (char const )'C', (char const )'A', (char const )'N', (char const )'/', (char const )'U', (char const )'S', (char const )'B', (char const )' ', (char const )'i', (char const )'n', (char const )'t', (char const )'e', (char const )'r', (char const )'f', (char const )'a', (char const )'c', (char const )'e', (char const )'s', (char const )'\000'}; [L5354-L5359] static char const __mod_license33[15] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'l', (char const )'i', (char const )'c', (char const )'e', (char const )'n', (char const )'s', (char const )'e', (char const )'=', (char const )'G', (char const )'P', (char const )'L', (char const )' ', (char const )'v', (char const )'2', (char const )'\000'}; [L6725] int LDV_IN_INTERRUPT ; [L6726] static int res_ems_usb_open_10 ; [L6727] static int res_ems_usb_close_12 ; [L6728] static int res_ems_usb_probe_16 ; [L6892] int ldv_urb_state = 0; [L6893] int ldv_coherent_state = 0; [L5173] static struct lock_class_key __key___7 ; [L5174] static struct lock_class_key __key___8 ; [L5360-L5362] static struct usb_device_id ems_usb_table[1] = { {(__u16 )3, (__u16 )4822, (__u16 )1092, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L6336-L6376] static struct net_device_ops const ems_usb_netdev_ops = {(int (*)(struct net_device *dev ))0, (void (*)(struct net_device *dev ))0, & ems_usb_open, & ems_usb_close, & ems_usb_start_xmit, (u16 (*)(struct net_device *dev , struct sk_buff *skb ))0, (void (*)(struct net_device *dev , int flags ))0, (void (*)(struct net_device *dev ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , void *addr ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , struct ifreq *ifr , int cmd ))0, (int (*)(struct net_device *dev , struct ifmap *map ))0, (int (*)(struct net_device *dev , int new_mtu ))0, (int (*)(struct net_device *dev , struct neigh_parms * ))0, (void (*)(struct net_device *dev ))0, (struct rtnl_link_stats64 *(*)(struct net_device *dev , struct rtnl_link_stats64 *storage ))0, (struct net_device_stats *(*)(struct net_device *dev ))0, (void (*)(struct net_device *dev , struct vlan_group *grp ))0, (void (*)(struct net_device *dev , unsigned short vid ))0, (void (*)(struct net_device *dev , unsigned short vid ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , struct netpoll_info *info ))0, (void (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , int queue , u8 *mac ))0, (int (*)(struct net_device *dev , int queue , u16 vlan , u8 qos ))0, (int (*)(struct net_device *dev , int vf , int rate ))0, (int (*)(struct net_device *dev , int vf , struct ifla_vf_info *ivf ))0, (int (*)(struct net_device *dev , int vf , struct nlattr **port ))0, (int (*)(struct net_device *dev , int vf , struct sk_buff *skb ))0, (int (*)(struct net_device *dev , u8 tc ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev ))0, (int (*)(struct net_device *dev , u16 xid , struct scatterlist *sgl , unsigned int sgc ))0, (int (*)(struct net_device *dev , u16 xid ))0, (int (*)(struct net_device *dev , u16 xid , struct scatterlist *sgl , unsigned int sgc ))0, (int (*)(struct net_device *dev , u64 *wwn , int type ))0, (int (*)(struct net_device *dev , struct sk_buff const *skb , u16 rxq_index , u32 flow_id ))0, (int (*)(struct net_device *dev , struct net_device *slave_dev ))0, (int (*)(struct net_device *dev , struct net_device *slave_dev ))0, (u32 (*)(struct net_device *dev , u32 features ))0, (int (*)(struct net_device *dev , u32 features ))0}; [L6377-L6381] static struct can_bittiming_const ems_usb_bittiming_const = {{(char )'e', (char )'m', (char )'s', (char )'_', (char )'u', (char )'s', (char )'b', (char )'\000', (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, (__u32 )1, (__u32 )16, (__u32 )1, (__u32 )8, (__u32 )4, (__u32 )1, (__u32 )64, (__u32 )1}; [L6649-L6667] static struct usb_driver ems_usb_driver = {"ems_usb", & ems_usb_probe, & ems_usb_disconnect, (int (*)(struct usb_interface *intf , unsigned int code , void *buf ))0, (int (*)(struct usb_interface *intf , pm_message_t message ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (int (*)(struct usb_interface *intf ))0, (struct usb_device_id const *)(ems_usb_table), {{{{{0U}, 0U, 0U, (void *)0, {(struct lock_class_key *)0, {(struct lock_class *)0, (struct lock_class *)0}, (char const *)0, 0, 0UL}}}}, {(struct list_head *)0, (struct list_head *)0}}, {{(char const *)0, (struct bus_type *)0, (struct module *)0, (char const *)0, (_Bool)0, (struct of_device_id const *)0, (int (*)(struct device *dev ))0, (int (*)(struct device *dev ))0, (void (*)(struct device *dev ))0, (int (*)(struct device *dev , pm_message_t state ))0, (int (*)(struct device *dev ))0, (struct attribute_group const **)0, (struct dev_pm_ops const *)0, (struct driver_private *)0}, 0}, 0U, 0U, 0U}; VAL [\old(__key___7)=null, \old(__key___7)=null, \old(__key___8)=null, \old(__key___8)=null, \old(ems_usb_bittiming_const)=null, \old(ems_usb_bittiming_const)=null, \old(ems_usb_driver)=null, \old(ems_usb_driver)=null, \old(ems_usb_netdev_ops)=null, \old(ems_usb_netdev_ops)=null, \old(ems_usb_table)=null, \old(ems_usb_table)=null, \old(ldv_coherent_state)=18446744073709551488, \old(LDV_IN_INTERRUPT)=18446744073709551508, \old(ldv_urb_state)=18446744073709551560, \old(res_ems_usb_close_12)=18446744073709551612, \old(res_ems_usb_open_10)=18446744073709551615, \old(res_ems_usb_probe_16)=18446744073709551500, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6730] struct net_device *var_group1 ; [L6731] struct sk_buff *var_group2 ; [L6732] struct usb_interface *var_group3 ; [L6733] struct usb_device_id const *var_ems_usb_probe_16_p1 ; [L6734] int tmp___7 ; [L6735] int ldv_s_ems_usb_netdev_ops_net_device_ops ; [L6736] int ldv_s_ems_usb_driver_usb_driver ; [L6737] int tmp___8 ; [L6738] int tmp___9 ; [L6742] LDV_IN_INTERRUPT = 1 [L6744] CALL, EXPR ems_usb_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6671] int err ; [L6676] CALL, EXPR usb_register(& ems_usb_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, driver={18446744073709551548:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L5163] int tmp___7 ; [L5167] tmp___7 = usb_register_driver(driver, & __this_module, "ems_usb") [L5169] return (tmp___7); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, driver={18446744073709551548:0}, driver={18446744073709551548:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0] [L6676] RET, EXPR usb_register(& ems_usb_driver) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, usb_register(& ems_usb_driver)=0] [L6676] err = usb_register(& ems_usb_driver) [L6678] COND FALSE !(\read(err)) [L6686] return (0); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, err=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6744] RET, EXPR ems_usb_init() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_init()=0, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6744] tmp___7 = ems_usb_init() [L6746] COND FALSE !(\read(tmp___7)) [L6751] ldv_s_ems_usb_netdev_ops_net_device_ops = 0 [L6752] ldv_s_ems_usb_driver_usb_driver = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0] [L6754] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0] [L6757] tmp___9 = __VERIFIER_nondet_int() [L6759] COND TRUE \read(tmp___9) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___9=1] [L6771] tmp___8 = __VERIFIER_nondet_int() [L6773] COND FALSE !(tmp___8 == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1] [L6776] COND FALSE !(tmp___8 == 1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1] [L6779] COND TRUE tmp___8 == 2 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1] [L6824] CALL ems_usb_start_xmit(var_group2, var_group1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}] [L6126] struct ems_usb *dev ; [L6127] void *tmp___7 ; [L6128] struct ems_tx_urb_context *context ; [L6129] struct net_device_stats *stats ; [L6130] struct can_frame *cf ; [L6131] struct ems_cpc_msg *msg ; [L6132] struct urb *urb ; [L6133] u8 *buf ; [L6134] int i ; [L6135] int err ; [L6136] size_t size ; [L6137] int tmp___8 ; [L6138] void *tmp___9 ; [L6139] unsigned int tmp___10 ; [L6140] int tmp___11 ; [L6141] long tmp___12 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}] [L6145] CALL, EXPR netdev_priv((struct net_device const *)netdev) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L4983] return ((void *)((char *)dev + ((sizeof(struct net_device ) + 31UL) & 0x0fffffffffffffe0UL))); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result={0:-520}, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6145] RET, EXPR netdev_priv((struct net_device const *)netdev) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, netdev_priv((struct net_device const *)netdev)={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}] [L6145] tmp___7 = netdev_priv((struct net_device const *)netdev) [L6146] dev = (struct ems_usb *)tmp___7 [L6147] context = (struct ems_tx_urb_context *)((void *)0) [L6148] stats = & netdev->stats [L6149] EXPR skb->data [L6149] cf = (struct can_frame *)skb->data [L6150] size = 15UL + sizeof(struct cpc_can_msg ) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}] [L6151] CALL, EXPR can_dropped_invalid_skb(netdev, skb) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}] [L5280] struct can_frame const *cf ; [L5281] int tmp___7 ; [L5282] long tmp___8 ; [L5285] EXPR skb->data [L5285] cf = (struct can_frame const *)((struct can_frame *)skb->data) [L5286] EXPR skb->len VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}, skb->len=4294967309] [L5286] COND FALSE !((unsigned long )skb->len != sizeof(*cf)) [L5289] EXPR cf->can_dlc VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, cf->can_dlc=0, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}] [L5289] COND FALSE !((int const )cf->can_dlc > 8) [L5292] tmp___7 = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}, tmp___7=0] [L5295] tmp___8 = __builtin_expect((long )tmp___7, 0L) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}, tmp___7=0, tmp___8=0] [L5297] COND FALSE !(\read(tmp___8)) [L5306] return (0); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, dev={0:-520}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, skb={18446744073709551627:0}, skb={18446744073709551627:0}, tmp___7=0, tmp___8=0] [L6151] RET, EXPR can_dropped_invalid_skb(netdev, skb) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, can_dropped_invalid_skb(netdev, skb)=0, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}] [L6151] tmp___8 = can_dropped_invalid_skb(netdev, skb) [L6153] COND FALSE !(\read(tmp___8)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0] [L6159] CALL, EXPR usb_alloc_urb(0, 32U) VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6961] void *arbitrary_memory ; [L6962] void *tmp___7 ; VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, iso_packets=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6966] COND TRUE 1 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, iso_packets=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6969] tmp___7 = ldv_undefined_pointer() [L6970] arbitrary_memory = tmp___7 VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, arbitrary_memory={18446744073709551609:-104}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, iso_packets=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7={18446744073709551609:-104}] [L6972] COND FALSE !(! arbitrary_memory) [L6977] ldv_urb_state = ldv_urb_state + 1 [L6978] return ((struct urb *)arbitrary_memory); VAL [\old(iso_packets)=0, \old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result={18446744073709551609:-104}, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, arbitrary_memory={18446744073709551609:-104}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, iso_packets=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7={18446744073709551609:-104}] [L6159] RET, EXPR usb_alloc_urb(0, 32U) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, usb_alloc_urb(0, 32U)={18446744073709551609:-104}] [L6159] urb = usb_alloc_urb(0, 32U) [L6161] COND FALSE !(! urb) [L6170] EXPR dev->udev VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->udev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, urb={18446744073709551609:-104}] [L6170] CALL, EXPR usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6898] void *arbitrary_memory ; [L6899] void *tmp___7 ; VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6903] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6906] tmp___7 = ldv_undefined_pointer() [L6907] arbitrary_memory = tmp___7 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, arbitrary_memory={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, tmp___7={18446744073709551487:130}] [L6909] COND FALSE !(! arbitrary_memory) [L6914] ldv_coherent_state = ldv_coherent_state + 1 [L6915] return (arbitrary_memory); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(mem_flags)=32, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, \result={18446744073709551487:130}, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, arbitrary_memory={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma={18446744073709551609:0}, dma={18446744073709551609:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, mem_flags=32, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, tmp___7={18446744073709551487:130}] [L6170] RET, EXPR usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->udev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, urb={18446744073709551609:-104}, usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma)={18446744073709551487:130}] [L6170] tmp___9 = usb_alloc_coherent(dev->udev, size, 32U, & urb->transfer_dma) [L6171] buf = (u8 *)tmp___9 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6173] COND FALSE !(! buf) [L6182] msg = (struct ems_cpc_msg *)(buf + 4) [L6183] EXPR cf->can_id [L6183] msg->msg.can_msg.id = cf->can_id & 536870911U [L6184] EXPR cf->can_dlc [L6184] msg->msg.can_msg.length = cf->can_dlc [L6185] EXPR cf->can_id VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, cf->can_id=18446744073709551567, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6185] COND TRUE cf->can_id & 1073741824U [L6186] EXPR cf->can_id VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, cf->can_id=18446744073709551567, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6186] COND TRUE cf->can_id & 2147483648U [L6187] msg->type = (u8 )16 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6191] msg->length = (u8 )5 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6215] EXPR msg->msg.can_msg.id [L6215] msg->msg.can_msg.id = msg->msg.can_msg.id [L6216] i = 0 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6218] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6220] COND TRUE i < 10 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6225] EXPR dev->tx_contexts[i].echo_index VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->tx_contexts[i].echo_index=4294967306, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6225] COND TRUE dev->tx_contexts[i].echo_index == 10U [L6226] context = & dev->tx_contexts[i] VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6236] COND TRUE ! context [L6239] EXPR dev->udev [L6239] EXPR urb->transfer_dma VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->udev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}, urb->transfer_dma=18446744073709551629] [L6239] CALL usb_free_coherent(dev->udev, size, (void *)buf, urb->transfer_dma) VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6930] COND TRUE 1 VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6932] COND FALSE !(! ((unsigned long )addr != (unsigned long )((void *)0))) VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6939] COND TRUE \read(*addr) VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6940] COND TRUE ldv_coherent_state >= 1 VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=1, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6947] ldv_coherent_state = ldv_coherent_state - 1 VAL [\old(dma)=13, \old(ldv_coherent_state)=1, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \old(size)=28, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, addr={18446744073709551487:130}, addr={18446744073709551487:130}, dev={18446744073709551544:18446744073709551588}, dev={18446744073709551544:18446744073709551588}, dma=13, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28] [L6239] RET usb_free_coherent(dev->udev, size, (void *)buf, urb->transfer_dma) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, dev->udev={18446744073709551544:18446744073709551588}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}, urb->transfer_dma=18446744073709551629] [L6240] netdev->dev.parent [L6242] return ((netdev_tx_t )16); VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, \result=16, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, buf={18446744073709551487:130}, cf={18446744073709551614:0}, context={0:0}, dev={0:-520}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, i=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, msg={18446744073709551487:134}, netdev={0:-520}, netdev={0:-520}, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, size=28, skb={18446744073709551627:0}, skb={18446744073709551627:0}, stats={0:-332}, tmp___7={0:-520}, tmp___8=0, tmp___9={18446744073709551487:130}, urb={18446744073709551609:-104}] [L6824] RET ems_usb_start_xmit(var_group2, var_group1) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_start_xmit(var_group2, var_group1)=16, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6754] COND TRUE 1 VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=1, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6757] tmp___9 = __VERIFIER_nondet_int() [L6759] COND FALSE !(\read(tmp___9)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=0, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6762] COND FALSE !(! (ldv_s_ems_usb_netdev_ops_net_device_ops == 0)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=0, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6765] COND FALSE !(! (ldv_s_ems_usb_driver_usb_driver == 0)) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=0, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6865] CALL ems_usb_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6865] RET ems_usb_exit() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_ems_usb_driver_usb_driver=0, ldv_s_ems_usb_netdev_ops_net_device_ops=0, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0, tmp___7=0, tmp___8=2, tmp___9=0, var_group1={0:-520}, var_group2={18446744073709551627:0}] [L6869] CALL ldv_check_final_state() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L7027] COND FALSE !(ldv_urb_state == 0) VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L7031] CALL ldv_blast_assert() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] [L6878] __VERIFIER_error() VAL [\old(ldv_coherent_state)=0, \old(LDV_IN_INTERRUPT)=0, \old(ldv_urb_state)=0, \old(res_ems_usb_close_12)=0, \old(res_ems_usb_open_10)=0, \old(res_ems_usb_probe_16)=0, __key___7={18446744073709551506:0}, __key___8={18446744073709551611:0}, ems_usb_bittiming_const={18446744073709551594:0}, ems_usb_driver={18446744073709551548:0}, ems_usb_netdev_ops={18446744073709551559:0}, ems_usb_table={18446744073709551592:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=1, res_ems_usb_close_12=0, res_ems_usb_open_10=0, res_ems_usb_probe_16=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 50 procedures, 420 locations, 1 error locations. UNSAFE Result, 43.2s OverallTime, 19 OverallIterations, 2 TraceHistogramMax, 30.4s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 10619 SDtfs, 5658 SDslu, 21105 SDs, 0 SdLazy, 4770 SolverSat, 1596 SolverUnsat, 10 SolverUnknown, 0 SolverNotchecked, 25.3s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 112 GetRequests, 50 SyntacticMatches, 1 SemanticMatches, 61 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=7009occurred in iteration=14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 1.8s AutomataMinimizationTime, 18 MinimizatonAttempts, 1647 StatesRemovedByMinimization, 17 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 1409 NumberOfCodeBlocks, 1409 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 1296 ConstructedInterpolants, 0 QuantifiedInterpolants, 162441 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 18 InterpolantComputations, 18 PerfectInterpolantSequences, 36/36 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 04:37:34,559 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 04:37:34,560 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 04:37:34,567 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 04:37:34,567 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 04:37:34,568 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 04:37:34,569 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 04:37:34,570 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 04:37:34,571 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 04:37:34,572 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 04:37:34,572 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 04:37:34,573 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 04:37:34,573 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 04:37:34,574 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 04:37:34,575 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 04:37:34,575 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 04:37:34,576 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 04:37:34,578 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 04:37:34,579 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 04:37:34,580 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 04:37:34,581 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 04:37:34,582 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 04:37:34,583 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 04:37:34,584 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 04:37:34,584 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 04:37:34,585 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 04:37:34,585 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 04:37:34,586 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 04:37:34,586 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 04:37:34,587 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 04:37:34,587 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 04:37:34,589 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 04:37:34,589 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 04:37:34,589 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 04:37:34,589 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 04:37:34,590 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 04:37:34,590 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2018-11-23 04:37:34,601 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 04:37:34,601 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 04:37:34,601 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 04:37:34,602 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 04:37:34,602 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 04:37:34,602 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 04:37:34,602 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 04:37:34,602 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 04:37:34,603 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 04:37:34,603 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 04:37:34,603 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 04:37:34,603 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 04:37:34,603 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 04:37:34,603 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 04:37:34,603 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 04:37:34,603 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 04:37:34,603 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 04:37:34,604 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 04:37:34,604 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 04:37:34,605 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 04:37:34,605 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 04:37:34,605 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 04:37:34,605 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 04:37:34,606 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 04:37:34,606 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 04:37:34,606 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-23 04:37:34,606 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 04:37:34,606 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 04:37:34,606 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 04:37:34,606 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 04:37:34,606 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8b52ac207b5673e74fbe6c307fe646517274f5cc [2018-11-23 04:37:34,634 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 04:37:34,642 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 04:37:34,644 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 04:37:34,645 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 04:37:34,645 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 04:37:34,645 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 04:37:34,680 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data/3464254e7/5fcf26aa8f28444987f5790f0bc72509/FLAGeb6119411 [2018-11-23 04:37:35,228 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 04:37:35,229 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-net-can-usb-ems_usb.ko_false-unreach-call.cil.out.i.pp.i [2018-11-23 04:37:35,250 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data/3464254e7/5fcf26aa8f28444987f5790f0bc72509/FLAGeb6119411 [2018-11-23 04:37:35,666 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_8972fb0e-7eb0-4669-aa58-36e5cca1815d/bin-2019/uautomizer/data/3464254e7/5fcf26aa8f28444987f5790f0bc72509 [2018-11-23 04:37:35,668 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 04:37:35,669 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 04:37:35,670 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 04:37:35,670 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 04:37:35,673 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 04:37:35,674 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:37:35" (1/1) ... [2018-11-23 04:37:35,676 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3d708b7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:37:35, skipping insertion in model container [2018-11-23 04:37:35,676 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:37:35" (1/1) ... [2018-11-23 04:37:35,684 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 04:37:35,766 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 04:37:36,716 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 04:37:36,740 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 04:37:36,928 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 04:37:37,049 ERROR L311 MainTranslator]: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2: CACSL2BoogieTranslator: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2: de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.chandler.ProcedureManager.computeFinalProcedureDeclarations(ProcedureManager.java:193) [2018-11-23 04:37:37,049 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@550e3038 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:37:37, skipping insertion in model container [2018-11-23 04:37:37,049 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 04:37:37,050 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2018-11-23 04:37:37,050 INFO L168 Benchmark]: Toolchain (without parser) took 1381.72 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 145.2 MB). Free memory was 937.9 MB in the beginning and 958.6 MB in the end (delta: -20.6 MB). Peak memory consumption was 148.4 MB. Max. memory is 11.5 GB. [2018-11-23 04:37:37,052 INFO L168 Benchmark]: CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 04:37:37,052 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1379.92 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 145.2 MB). Free memory was 937.9 MB in the beginning and 958.6 MB in the end (delta: -20.6 MB). Peak memory consumption was 148.4 MB. Max. memory is 11.5 GB. [2018-11-23 04:37:37,054 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1379.92 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 145.2 MB). Free memory was 937.9 MB in the beginning and 958.6 MB in the end (delta: -20.6 MB). Peak memory consumption was 148.4 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - ExceptionOrErrorResult: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2 CACSL2BoogieTranslator: UndeclaredFunctionException: a function that is called in the program is not declared in the program: write~unchecked~intINTTYPE2: de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.chandler.ProcedureManager.computeFinalProcedureDeclarations(ProcedureManager.java:193) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...