./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-39a1d13-1-101_1a-drivers--block--virtio_blk.ko-entry_point_false-unreach-call.cil.out.c --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-39a1d13-1-101_1a-drivers--block--virtio_blk.ko-entry_point_false-unreach-call.cil.out.c -s /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 3febb4cad10e1dcca564dc92c54e35aa9ecdd9b7 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-39a1d13-1-101_1a-drivers--block--virtio_blk.ko-entry_point_false-unreach-call.cil.out.c -s /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 3febb4cad10e1dcca564dc92c54e35aa9ecdd9b7 ................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 03:02:13,411 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 03:02:13,412 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 03:02:13,419 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 03:02:13,419 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 03:02:13,420 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 03:02:13,421 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 03:02:13,423 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 03:02:13,424 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 03:02:13,424 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 03:02:13,425 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 03:02:13,425 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 03:02:13,426 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 03:02:13,426 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 03:02:13,427 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 03:02:13,428 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 03:02:13,428 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 03:02:13,430 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 03:02:13,431 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 03:02:13,432 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 03:02:13,433 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 03:02:13,434 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 03:02:13,436 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 03:02:13,436 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 03:02:13,436 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 03:02:13,437 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 03:02:13,437 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 03:02:13,438 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 03:02:13,439 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 03:02:13,439 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 03:02:13,439 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 03:02:13,440 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 03:02:13,440 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 03:02:13,440 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 03:02:13,441 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 03:02:13,441 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 03:02:13,442 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf [2018-11-23 03:02:13,452 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 03:02:13,452 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 03:02:13,453 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 03:02:13,453 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 03:02:13,453 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 03:02:13,453 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 03:02:13,453 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 03:02:13,454 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 03:02:13,454 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 03:02:13,454 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 03:02:13,454 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 03:02:13,454 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 03:02:13,454 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 03:02:13,454 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 03:02:13,455 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 03:02:13,455 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 03:02:13,455 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 03:02:13,455 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 03:02:13,455 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 03:02:13,455 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 03:02:13,455 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 03:02:13,456 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 03:02:13,456 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 03:02:13,456 INFO L133 SettingsManager]: * Trace refinement strategy=PENGUIN [2018-11-23 03:02:13,456 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 03:02:13,456 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 03:02:13,456 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 03:02:13,456 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3febb4cad10e1dcca564dc92c54e35aa9ecdd9b7 [2018-11-23 03:02:13,479 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 03:02:13,489 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 03:02:13,491 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 03:02:13,492 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 03:02:13,493 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 03:02:13,493 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-39a1d13-1-101_1a-drivers--block--virtio_blk.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 03:02:13,529 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data/06827e319/20b92e5b70e24e70bcffddead5949f6d/FLAGd3ef903c1 [2018-11-23 03:02:14,057 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 03:02:14,058 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-39a1d13-1-101_1a-drivers--block--virtio_blk.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 03:02:14,073 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data/06827e319/20b92e5b70e24e70bcffddead5949f6d/FLAGd3ef903c1 [2018-11-23 03:02:14,515 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data/06827e319/20b92e5b70e24e70bcffddead5949f6d [2018-11-23 03:02:14,516 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 03:02:14,517 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 03:02:14,518 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 03:02:14,518 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 03:02:14,521 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 03:02:14,521 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:02:14" (1/1) ... [2018-11-23 03:02:14,523 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@17793024 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:14, skipping insertion in model container [2018-11-23 03:02:14,523 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:02:14" (1/1) ... [2018-11-23 03:02:14,530 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 03:02:14,578 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 03:02:15,248 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 03:02:15,257 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 03:02:15,388 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 03:02:15,432 INFO L195 MainTranslator]: Completed translation [2018-11-23 03:02:15,433 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15 WrapperNode [2018-11-23 03:02:15,433 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 03:02:15,433 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 03:02:15,433 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 03:02:15,434 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 03:02:15,439 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... [2018-11-23 03:02:15,465 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... [2018-11-23 03:02:15,522 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 03:02:15,522 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 03:02:15,522 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 03:02:15,522 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 03:02:15,528 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... [2018-11-23 03:02:15,528 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... [2018-11-23 03:02:15,539 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... [2018-11-23 03:02:15,539 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... [2018-11-23 03:02:15,577 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... [2018-11-23 03:02:15,585 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... [2018-11-23 03:02:15,593 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... [2018-11-23 03:02:15,604 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 03:02:15,605 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 03:02:15,605 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 03:02:15,605 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 03:02:15,606 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:15" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 03:02:15,659 INFO L130 BoogieDeclarations]: Found specification of procedure virtqueue_add_buf_gfp [2018-11-23 03:02:15,659 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2018-11-23 03:02:15,659 INFO L130 BoogieDeclarations]: Found specification of procedure blk_stop_queue [2018-11-23 03:02:15,659 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_max_segment_size [2018-11-23 03:02:15,659 INFO L130 BoogieDeclarations]: Found specification of procedure scsi_cmd_ioctl [2018-11-23 03:02:15,659 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 03:02:15,660 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_config_buf [2018-11-23 03:02:15,660 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_config_buf [2018-11-23 03:02:15,660 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2018-11-23 03:02:15,660 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2018-11-23 03:02:15,660 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 03:02:15,660 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 03:02:15,660 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2018-11-23 03:02:15,660 INFO L130 BoogieDeclarations]: Found specification of procedure req_get_ioprio [2018-11-23 03:02:15,660 INFO L138 BoogieDeclarations]: Found implementation of procedure req_get_ioprio [2018-11-23 03:02:15,661 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2018-11-23 03:02:15,662 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-23 03:02:15,662 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-23 03:02:15,662 INFO L130 BoogieDeclarations]: Found specification of procedure __get_free_pages [2018-11-23 03:02:15,662 INFO L130 BoogieDeclarations]: Found specification of procedure add_disk [2018-11-23 03:02:15,662 INFO L130 BoogieDeclarations]: Found specification of procedure mempool_free [2018-11-23 03:02:15,662 INFO L130 BoogieDeclarations]: Found specification of procedure sg_set_buf [2018-11-23 03:02:15,663 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_set_buf [2018-11-23 03:02:15,663 INFO L130 BoogieDeclarations]: Found specification of procedure blk_start_queue [2018-11-23 03:02:15,663 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 03:02:15,664 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_blkdev [2018-11-23 03:02:15,664 INFO L130 BoogieDeclarations]: Found specification of procedure del_gendisk [2018-11-23 03:02:15,664 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_alignment_offset [2018-11-23 03:02:15,664 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 03:02:15,664 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 03:02:15,664 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 03:02:15,665 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 03:02:15,665 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 03:02:15,665 INFO L130 BoogieDeclarations]: Found specification of procedure index_to_minor [2018-11-23 03:02:15,665 INFO L138 BoogieDeclarations]: Found implementation of procedure index_to_minor [2018-11-23 03:02:15,665 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_io_min [2018-11-23 03:02:15,665 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_check_driver_offered_feature [2018-11-23 03:02:15,665 INFO L130 BoogieDeclarations]: Found specification of procedure blk_rq_map_sg [2018-11-23 03:02:15,666 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2018-11-23 03:02:15,666 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2018-11-23 03:02:15,666 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2018-11-23 03:02:15,666 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2018-11-23 03:02:15,666 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2018-11-23 03:02:15,666 INFO L130 BoogieDeclarations]: Found specification of procedure blk_start_request [2018-11-23 03:02:15,666 INFO L130 BoogieDeclarations]: Found specification of procedure __list_add [2018-11-23 03:02:15,666 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_io_opt [2018-11-23 03:02:15,666 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_has_feature [2018-11-23 03:02:15,666 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_has_feature [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure virtqueue_get_buf [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ptr [2018-11-23 03:02:15,667 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ptr [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure blk_cleanup_queue [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure __blk_end_request_all [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_bounce_limit [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure mempool_alloc [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_virtio_driver [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure virtqueue_kick [2018-11-23 03:02:15,667 INFO L130 BoogieDeclarations]: Found specification of procedure blk_execute_rq [2018-11-23 03:02:15,668 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2018-11-23 03:02:15,668 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2018-11-23 03:02:15,668 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2018-11-23 03:02:15,668 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_unlock_irqrestore [2018-11-23 03:02:15,668 INFO L130 BoogieDeclarations]: Found specification of procedure virtblk_remove [2018-11-23 03:02:15,668 INFO L138 BoogieDeclarations]: Found implementation of procedure virtblk_remove [2018-11-23 03:02:15,668 INFO L130 BoogieDeclarations]: Found specification of procedure mempool_destroy [2018-11-23 03:02:15,668 INFO L130 BoogieDeclarations]: Found specification of procedure mempool_create [2018-11-23 03:02:15,668 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 03:02:15,668 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2018-11-23 03:02:15,669 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2018-11-23 03:02:15,669 INFO L130 BoogieDeclarations]: Found specification of procedure register_virtio_driver [2018-11-23 03:02:15,669 INFO L130 BoogieDeclarations]: Found specification of procedure set_disk_ro [2018-11-23 03:02:15,669 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_logical_block_size [2018-11-23 03:02:15,669 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 03:02:15,669 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 03:02:15,669 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 03:02:15,669 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 03:02:15,669 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_max_segments [2018-11-23 03:02:15,669 INFO L130 BoogieDeclarations]: Found specification of procedure alloc_disk [2018-11-23 03:02:15,669 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_physical_block_size [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure sg_init_table [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure bio_put [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure bio_map_kern [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2018-11-23 03:02:15,670 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure blk_init_queue [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure register_blkdev [2018-11-23 03:02:15,670 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2018-11-23 03:02:15,671 INFO L130 BoogieDeclarations]: Found specification of procedure put_disk [2018-11-23 03:02:15,671 INFO L130 BoogieDeclarations]: Found specification of procedure blk_peek_request [2018-11-23 03:02:15,671 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2018-11-23 03:02:15,671 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_ordered [2018-11-23 03:02:15,671 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_dereference [2018-11-23 03:02:15,671 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_max_hw_sectors [2018-11-23 03:02:15,671 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 03:02:15,671 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2018-11-23 03:02:15,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2018-11-23 03:02:15,671 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 03:02:15,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 03:02:15,672 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 03:02:15,672 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 03:02:18,330 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 03:02:18,330 INFO L280 CfgBuilder]: Removed 96 assue(true) statements. [2018-11-23 03:02:18,331 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:02:18 BoogieIcfgContainer [2018-11-23 03:02:18,331 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 03:02:18,331 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-23 03:02:18,331 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-23 03:02:18,340 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-23 03:02:18,341 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:02:18" (1/1) ... [2018-11-23 03:02:18,354 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:02:18,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:18,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 360 states to 256 states and 360 transitions. [2018-11-23 03:02:18,396 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 360 transitions. [2018-11-23 03:02:18,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2018-11-23 03:02:18,401 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:18,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:18,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:02:18,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:18,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 261 states and 381 transitions. [2018-11-23 03:02:18,680 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 381 transitions. [2018-11-23 03:02:18,681 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2018-11-23 03:02:18,682 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:18,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:18,736 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 03:02:18,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:18,746 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 382 states to 262 states and 382 transitions. [2018-11-23 03:02:18,746 INFO L276 IsEmpty]: Start isEmpty. Operand 262 states and 382 transitions. [2018-11-23 03:02:18,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2018-11-23 03:02:18,747 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:18,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:18,801 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:02:18,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:18,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 272 states and 417 transitions. [2018-11-23 03:02:18,900 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 417 transitions. [2018-11-23 03:02:18,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2018-11-23 03:02:18,902 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:18,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:18,947 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:02:19,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:19,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 439 states to 275 states and 435 transitions. [2018-11-23 03:02:19,054 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 435 transitions. [2018-11-23 03:02:19,055 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2018-11-23 03:02:19,056 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:19,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:19,092 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2018-11-23 03:02:19,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:19,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 442 states to 277 states and 438 transitions. [2018-11-23 03:02:19,099 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 438 transitions. [2018-11-23 03:02:19,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2018-11-23 03:02:19,100 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:19,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:19,136 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 03:02:19,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:19,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 442 states to 278 states and 438 transitions. [2018-11-23 03:02:19,182 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 438 transitions. [2018-11-23 03:02:19,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2018-11-23 03:02:19,183 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:19,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:19,228 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:02:19,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:19,267 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 437 states to 277 states and 433 transitions. [2018-11-23 03:02:19,267 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 433 transitions. [2018-11-23 03:02:19,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2018-11-23 03:02:19,268 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:19,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:19,301 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:02:19,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:19,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 439 states to 279 states and 435 transitions. [2018-11-23 03:02:19,336 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 435 transitions. [2018-11-23 03:02:19,337 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2018-11-23 03:02:19,337 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:19,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:19,391 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:02:19,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:19,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 459 states to 284 states and 455 transitions. [2018-11-23 03:02:19,714 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 455 transitions. [2018-11-23 03:02:19,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-23 03:02:19,715 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:19,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:19,763 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:02:19,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:19,786 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 453 states to 283 states and 449 transitions. [2018-11-23 03:02:19,786 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 449 transitions. [2018-11-23 03:02:19,787 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-11-23 03:02:19,787 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:19,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:19,810 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2018-11-23 03:02:19,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:19,875 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 455 states to 285 states and 451 transitions. [2018-11-23 03:02:19,875 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 451 transitions. [2018-11-23 03:02:19,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2018-11-23 03:02:19,876 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:19,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:19,900 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2018-11-23 03:02:19,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:19,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 455 states to 286 states and 451 transitions. [2018-11-23 03:02:19,908 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 451 transitions. [2018-11-23 03:02:19,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2018-11-23 03:02:19,908 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:19,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:19,946 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 03:02:20,033 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:20,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 456 states to 287 states and 452 transitions. [2018-11-23 03:02:20,035 INFO L276 IsEmpty]: Start isEmpty. Operand 287 states and 452 transitions. [2018-11-23 03:02:20,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2018-11-23 03:02:20,035 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:20,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:20,059 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:02:20,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:20,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 288 states and 451 transitions. [2018-11-23 03:02:20,140 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 451 transitions. [2018-11-23 03:02:20,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2018-11-23 03:02:20,140 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:20,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:20,158 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 03:02:20,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:20,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 289 states and 451 transitions. [2018-11-23 03:02:20,167 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 451 transitions. [2018-11-23 03:02:20,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2018-11-23 03:02:20,168 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:20,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:20,185 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 03:02:20,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:20,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 465 states to 292 states and 455 transitions. [2018-11-23 03:02:20,236 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 455 transitions. [2018-11-23 03:02:20,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2018-11-23 03:02:20,236 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:20,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:20,253 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 03:02:20,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:20,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 469 states to 295 states and 459 transitions. [2018-11-23 03:02:20,265 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 459 transitions. [2018-11-23 03:02:20,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-23 03:02:20,265 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:20,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:20,283 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2018-11-23 03:02:20,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:20,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 472 states to 298 states and 462 transitions. [2018-11-23 03:02:20,305 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 462 transitions. [2018-11-23 03:02:20,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-23 03:02:20,305 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:20,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:20,335 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 03:02:20,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:20,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 498 states to 308 states and 488 transitions. [2018-11-23 03:02:20,399 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 488 transitions. [2018-11-23 03:02:20,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2018-11-23 03:02:20,400 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:20,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:20,435 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 7 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:02:20,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:20,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 518 states to 311 states and 503 transitions. [2018-11-23 03:02:20,672 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 503 transitions. [2018-11-23 03:02:20,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2018-11-23 03:02:20,672 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:20,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:20,727 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:02:21,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:21,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 541 states to 316 states and 522 transitions. [2018-11-23 03:02:21,050 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 522 transitions. [2018-11-23 03:02:21,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2018-11-23 03:02:21,051 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:21,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:21,084 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:02:21,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:21,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 557 states to 319 states and 538 transitions. [2018-11-23 03:02:21,318 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 538 transitions. [2018-11-23 03:02:21,319 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2018-11-23 03:02:21,319 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:21,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:21,352 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 8 proven. 3 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:02:21,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:21,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 324 states and 558 transitions. [2018-11-23 03:02:21,898 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 558 transitions. [2018-11-23 03:02:21,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 03:02:21,899 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:21,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:21,936 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-23 03:02:22,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:22,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 592 states to 328 states and 566 transitions. [2018-11-23 03:02:22,121 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 566 transitions. [2018-11-23 03:02:22,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 03:02:22,121 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:22,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:22,155 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-23 03:02:22,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:22,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 592 states to 329 states and 566 transitions. [2018-11-23 03:02:22,231 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 566 transitions. [2018-11-23 03:02:22,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-23 03:02:22,232 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:22,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:22,308 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:22,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:22,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 581 states to 328 states and 555 transitions. [2018-11-23 03:02:22,372 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 555 transitions. [2018-11-23 03:02:22,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-23 03:02:22,373 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:22,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:22,481 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:23,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:23,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 606 states to 332 states and 573 transitions. [2018-11-23 03:02:23,348 INFO L276 IsEmpty]: Start isEmpty. Operand 332 states and 573 transitions. [2018-11-23 03:02:23,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-23 03:02:23,348 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:23,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:23,431 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:02:24,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:24,224 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 633 states to 339 states and 594 transitions. [2018-11-23 03:02:24,224 INFO L276 IsEmpty]: Start isEmpty. Operand 339 states and 594 transitions. [2018-11-23 03:02:24,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-23 03:02:24,225 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:24,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:24,254 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 03:02:24,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:24,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 635 states to 341 states and 596 transitions. [2018-11-23 03:02:24,292 INFO L276 IsEmpty]: Start isEmpty. Operand 341 states and 596 transitions. [2018-11-23 03:02:24,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 03:02:24,293 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:24,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:24,336 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 4 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-23 03:02:24,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:24,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 638 states to 343 states and 599 transitions. [2018-11-23 03:02:24,494 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 599 transitions. [2018-11-23 03:02:24,495 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 03:02:24,495 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:24,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:24,517 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:24,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:24,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 647 states to 347 states and 608 transitions. [2018-11-23 03:02:24,763 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 608 transitions. [2018-11-23 03:02:24,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 03:02:24,763 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:24,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:24,824 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-23 03:02:24,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:24,877 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 634 states to 346 states and 595 transitions. [2018-11-23 03:02:24,877 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 595 transitions. [2018-11-23 03:02:24,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-23 03:02:24,877 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:24,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:24,902 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-23 03:02:25,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:25,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 648 states to 355 states and 609 transitions. [2018-11-23 03:02:25,154 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 609 transitions. [2018-11-23 03:02:25,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-23 03:02:25,155 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:25,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:25,194 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-23 03:02:25,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:25,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 656 states to 360 states and 617 transitions. [2018-11-23 03:02:25,226 INFO L276 IsEmpty]: Start isEmpty. Operand 360 states and 617 transitions. [2018-11-23 03:02:25,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2018-11-23 03:02:25,227 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:25,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:25,264 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:25,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:25,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 658 states to 362 states and 619 transitions. [2018-11-23 03:02:25,281 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 619 transitions. [2018-11-23 03:02:25,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-23 03:02:25,282 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:25,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:25,312 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2018-11-23 03:02:25,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:25,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 660 states to 364 states and 621 transitions. [2018-11-23 03:02:25,496 INFO L276 IsEmpty]: Start isEmpty. Operand 364 states and 621 transitions. [2018-11-23 03:02:25,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-23 03:02:25,497 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:25,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:25,530 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 10 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:25,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:25,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 667 states to 368 states and 628 transitions. [2018-11-23 03:02:25,733 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 628 transitions. [2018-11-23 03:02:25,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-23 03:02:25,734 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:25,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:25,764 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 7 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-23 03:02:26,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:26,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 673 states to 371 states and 634 transitions. [2018-11-23 03:02:26,110 INFO L276 IsEmpty]: Start isEmpty. Operand 371 states and 634 transitions. [2018-11-23 03:02:26,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-11-23 03:02:26,111 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:26,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:26,132 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:26,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:26,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 681 states to 375 states and 642 transitions. [2018-11-23 03:02:26,381 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 642 transitions. [2018-11-23 03:02:26,381 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-11-23 03:02:26,381 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:26,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:26,404 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 7 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-23 03:02:26,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:26,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 684 states to 377 states and 645 transitions. [2018-11-23 03:02:26,419 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 645 transitions. [2018-11-23 03:02:26,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-11-23 03:02:26,420 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:26,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:26,438 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:26,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:26,470 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 686 states to 379 states and 647 transitions. [2018-11-23 03:02:26,470 INFO L276 IsEmpty]: Start isEmpty. Operand 379 states and 647 transitions. [2018-11-23 03:02:26,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 03:02:26,471 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:26,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:26,493 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2018-11-23 03:02:26,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:26,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 690 states to 382 states and 651 transitions. [2018-11-23 03:02:26,505 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 651 transitions. [2018-11-23 03:02:26,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-23 03:02:26,506 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:26,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:26,531 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2018-11-23 03:02:26,604 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:26,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 690 states to 383 states and 651 transitions. [2018-11-23 03:02:26,604 INFO L276 IsEmpty]: Start isEmpty. Operand 383 states and 651 transitions. [2018-11-23 03:02:26,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 03:02:26,605 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:26,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:26,626 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:27,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:27,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 710 states to 390 states and 670 transitions. [2018-11-23 03:02:27,247 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 670 transitions. [2018-11-23 03:02:27,248 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 03:02:27,248 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:27,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:27,276 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:27,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:27,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 725 states to 395 states and 684 transitions. [2018-11-23 03:02:27,811 INFO L276 IsEmpty]: Start isEmpty. Operand 395 states and 684 transitions. [2018-11-23 03:02:27,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 03:02:27,811 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:27,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:27,829 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-23 03:02:27,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:27,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 730 states to 398 states and 689 transitions. [2018-11-23 03:02:27,854 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 689 transitions. [2018-11-23 03:02:27,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 03:02:27,855 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:27,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:27,876 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2018-11-23 03:02:27,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:27,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 732 states to 400 states and 691 transitions. [2018-11-23 03:02:27,944 INFO L276 IsEmpty]: Start isEmpty. Operand 400 states and 691 transitions. [2018-11-23 03:02:27,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-23 03:02:27,944 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:27,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:27,965 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-23 03:02:27,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:27,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 734 states to 402 states and 693 transitions. [2018-11-23 03:02:27,979 INFO L276 IsEmpty]: Start isEmpty. Operand 402 states and 693 transitions. [2018-11-23 03:02:27,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 03:02:27,980 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:27,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:28,012 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2018-11-23 03:02:28,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:28,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 737 states to 405 states and 696 transitions. [2018-11-23 03:02:28,260 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 696 transitions. [2018-11-23 03:02:28,261 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-23 03:02:28,261 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:28,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:28,295 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 03:02:28,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:28,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 742 states to 409 states and 701 transitions. [2018-11-23 03:02:28,379 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 701 transitions. [2018-11-23 03:02:28,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 03:02:28,379 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:28,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:28,400 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 10 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:28,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:28,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 762 states to 416 states and 720 transitions. [2018-11-23 03:02:28,638 INFO L276 IsEmpty]: Start isEmpty. Operand 416 states and 720 transitions. [2018-11-23 03:02:28,639 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 03:02:28,639 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:28,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:28,660 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2018-11-23 03:02:28,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:28,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 762 states to 417 states and 720 transitions. [2018-11-23 03:02:28,733 INFO L276 IsEmpty]: Start isEmpty. Operand 417 states and 720 transitions. [2018-11-23 03:02:28,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 03:02:28,733 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:28,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:28,754 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 10 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:28,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:28,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 773 states to 419 states and 730 transitions. [2018-11-23 03:02:28,899 INFO L276 IsEmpty]: Start isEmpty. Operand 419 states and 730 transitions. [2018-11-23 03:02:28,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-23 03:02:28,899 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:28,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:28,956 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2018-11-23 03:02:29,547 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:29,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 789 states to 423 states and 745 transitions. [2018-11-23 03:02:29,548 INFO L276 IsEmpty]: Start isEmpty. Operand 423 states and 745 transitions. [2018-11-23 03:02:29,549 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 03:02:29,549 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:29,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:29,564 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2018-11-23 03:02:29,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:29,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 788 states to 423 states and 744 transitions. [2018-11-23 03:02:29,573 INFO L276 IsEmpty]: Start isEmpty. Operand 423 states and 744 transitions. [2018-11-23 03:02:29,573 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 03:02:29,573 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:29,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:29,604 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2018-11-23 03:02:29,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:29,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 793 states to 427 states and 749 transitions. [2018-11-23 03:02:29,699 INFO L276 IsEmpty]: Start isEmpty. Operand 427 states and 749 transitions. [2018-11-23 03:02:29,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 03:02:29,699 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:29,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:29,722 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:29,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:29,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 805 states to 432 states and 761 transitions. [2018-11-23 03:02:29,887 INFO L276 IsEmpty]: Start isEmpty. Operand 432 states and 761 transitions. [2018-11-23 03:02:29,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 03:02:29,887 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:29,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:29,915 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:30,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:30,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 814 states to 434 states and 769 transitions. [2018-11-23 03:02:30,131 INFO L276 IsEmpty]: Start isEmpty. Operand 434 states and 769 transitions. [2018-11-23 03:02:30,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 03:02:30,132 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:30,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:30,153 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:30,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:30,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 820 states to 436 states and 774 transitions. [2018-11-23 03:02:30,319 INFO L276 IsEmpty]: Start isEmpty. Operand 436 states and 774 transitions. [2018-11-23 03:02:30,319 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 03:02:30,319 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:30,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:30,345 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:30,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:30,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 828 states to 438 states and 781 transitions. [2018-11-23 03:02:30,552 INFO L276 IsEmpty]: Start isEmpty. Operand 438 states and 781 transitions. [2018-11-23 03:02:30,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 03:02:30,552 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:30,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:30,570 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:30,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:30,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 835 states to 440 states and 787 transitions. [2018-11-23 03:02:30,731 INFO L276 IsEmpty]: Start isEmpty. Operand 440 states and 787 transitions. [2018-11-23 03:02:30,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 03:02:30,732 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:30,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:30,749 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 22 proven. 11 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-23 03:02:30,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:30,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 836 states to 441 states and 788 transitions. [2018-11-23 03:02:30,904 INFO L276 IsEmpty]: Start isEmpty. Operand 441 states and 788 transitions. [2018-11-23 03:02:30,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 03:02:30,905 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:30,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:30,924 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 22 proven. 11 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-23 03:02:30,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:30,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 840 states to 443 states and 792 transitions. [2018-11-23 03:02:30,941 INFO L276 IsEmpty]: Start isEmpty. Operand 443 states and 792 transitions. [2018-11-23 03:02:30,942 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 03:02:30,942 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:30,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:30,965 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 12 proven. 7 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2018-11-23 03:02:30,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:30,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 840 states to 444 states and 792 transitions. [2018-11-23 03:02:30,976 INFO L276 IsEmpty]: Start isEmpty. Operand 444 states and 792 transitions. [2018-11-23 03:02:30,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 03:02:30,977 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:30,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,006 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 23 proven. 11 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2018-11-23 03:02:31,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 842 states to 446 states and 794 transitions. [2018-11-23 03:02:31,022 INFO L276 IsEmpty]: Start isEmpty. Operand 446 states and 794 transitions. [2018-11-23 03:02:31,022 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 03:02:31,022 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,050 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 03:02:31,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 862 states to 453 states and 813 transitions. [2018-11-23 03:02:31,257 INFO L276 IsEmpty]: Start isEmpty. Operand 453 states and 813 transitions. [2018-11-23 03:02:31,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 03:02:31,258 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,280 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 03:02:31,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 871 states to 455 states and 821 transitions. [2018-11-23 03:02:31,419 INFO L276 IsEmpty]: Start isEmpty. Operand 455 states and 821 transitions. [2018-11-23 03:02:31,419 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 03:02:31,419 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,437 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-23 03:02:31,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 877 states to 458 states and 827 transitions. [2018-11-23 03:02:31,569 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 827 transitions. [2018-11-23 03:02:31,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 03:02:31,570 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,586 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-23 03:02:31,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 881 states to 460 states and 831 transitions. [2018-11-23 03:02:31,597 INFO L276 IsEmpty]: Start isEmpty. Operand 460 states and 831 transitions. [2018-11-23 03:02:31,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-23 03:02:31,598 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,624 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2018-11-23 03:02:31,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 881 states to 461 states and 831 transitions. [2018-11-23 03:02:31,637 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 831 transitions. [2018-11-23 03:02:31,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-23 03:02:31,637 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,657 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 7 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-23 03:02:31,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 887 states to 464 states and 837 transitions. [2018-11-23 03:02:31,841 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 837 transitions. [2018-11-23 03:02:31,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 03:02:31,842 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,858 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2018-11-23 03:02:31,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 889 states to 466 states and 839 transitions. [2018-11-23 03:02:31,868 INFO L276 IsEmpty]: Start isEmpty. Operand 466 states and 839 transitions. [2018-11-23 03:02:31,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 03:02:31,868 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,884 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2018-11-23 03:02:31,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 891 states to 468 states and 841 transitions. [2018-11-23 03:02:31,893 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 841 transitions. [2018-11-23 03:02:31,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 03:02:31,893 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,925 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2018-11-23 03:02:31,932 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:31,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 896 states to 471 states and 846 transitions. [2018-11-23 03:02:31,932 INFO L276 IsEmpty]: Start isEmpty. Operand 471 states and 846 transitions. [2018-11-23 03:02:31,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 03:02:31,933 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:31,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:31,968 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 17 proven. 9 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2018-11-23 03:02:32,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:32,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 896 states to 472 states and 846 transitions. [2018-11-23 03:02:32,127 INFO L276 IsEmpty]: Start isEmpty. Operand 472 states and 846 transitions. [2018-11-23 03:02:32,127 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 03:02:32,127 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:32,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:32,148 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 12 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2018-11-23 03:02:32,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:32,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 898 states to 474 states and 848 transitions. [2018-11-23 03:02:32,286 INFO L276 IsEmpty]: Start isEmpty. Operand 474 states and 848 transitions. [2018-11-23 03:02:32,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 03:02:32,287 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:32,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:32,308 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 12 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2018-11-23 03:02:32,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:32,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 902 states to 476 states and 852 transitions. [2018-11-23 03:02:32,545 INFO L276 IsEmpty]: Start isEmpty. Operand 476 states and 852 transitions. [2018-11-23 03:02:32,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-23 03:02:32,545 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:32,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:32,561 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-23 03:02:32,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:32,724 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 907 states to 480 states and 857 transitions. [2018-11-23 03:02:32,724 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 857 transitions. [2018-11-23 03:02:32,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-23 03:02:32,724 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:32,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:32,741 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2018-11-23 03:02:33,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:33,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 916 states to 482 states and 865 transitions. [2018-11-23 03:02:33,056 INFO L276 IsEmpty]: Start isEmpty. Operand 482 states and 865 transitions. [2018-11-23 03:02:33,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-23 03:02:33,057 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:33,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:33,072 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2018-11-23 03:02:33,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:33,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 926 states to 484 states and 874 transitions. [2018-11-23 03:02:33,346 INFO L276 IsEmpty]: Start isEmpty. Operand 484 states and 874 transitions. [2018-11-23 03:02:33,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 03:02:33,346 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:33,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:33,366 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2018-11-23 03:02:33,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:33,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 938 states to 492 states and 886 transitions. [2018-11-23 03:02:33,512 INFO L276 IsEmpty]: Start isEmpty. Operand 492 states and 886 transitions. [2018-11-23 03:02:33,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 03:02:33,512 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:33,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:33,539 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2018-11-23 03:02:33,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:33,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 938 states to 493 states and 886 transitions. [2018-11-23 03:02:33,557 INFO L276 IsEmpty]: Start isEmpty. Operand 493 states and 886 transitions. [2018-11-23 03:02:33,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 03:02:33,558 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:33,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:33,581 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-23 03:02:33,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:33,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 943 states to 496 states and 891 transitions. [2018-11-23 03:02:33,756 INFO L276 IsEmpty]: Start isEmpty. Operand 496 states and 891 transitions. [2018-11-23 03:02:33,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 03:02:33,757 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:33,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:33,779 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-23 03:02:33,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:33,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 942 states to 496 states and 890 transitions. [2018-11-23 03:02:33,798 INFO L276 IsEmpty]: Start isEmpty. Operand 496 states and 890 transitions. [2018-11-23 03:02:33,798 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 03:02:33,798 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:33,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:33,823 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-23 03:02:33,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:33,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 941 states to 496 states and 889 transitions. [2018-11-23 03:02:33,853 INFO L276 IsEmpty]: Start isEmpty. Operand 496 states and 889 transitions. [2018-11-23 03:02:33,853 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 03:02:33,853 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:33,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:33,895 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-23 03:02:33,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:33,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 938 states to 480 states and 864 transitions. [2018-11-23 03:02:33,908 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 864 transitions. [2018-11-23 03:02:33,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 03:02:33,909 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:33,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:33,940 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2018-11-23 03:02:34,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:34,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 938 states to 481 states and 864 transitions. [2018-11-23 03:02:34,097 INFO L276 IsEmpty]: Start isEmpty. Operand 481 states and 864 transitions. [2018-11-23 03:02:34,098 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 03:02:34,098 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:34,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:34,119 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2018-11-23 03:02:34,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:34,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 940 states to 483 states and 866 transitions. [2018-11-23 03:02:34,285 INFO L276 IsEmpty]: Start isEmpty. Operand 483 states and 866 transitions. [2018-11-23 03:02:34,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 03:02:34,286 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:34,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:34,315 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2018-11-23 03:02:34,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:34,525 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 943 states to 485 states and 869 transitions. [2018-11-23 03:02:34,525 INFO L276 IsEmpty]: Start isEmpty. Operand 485 states and 869 transitions. [2018-11-23 03:02:34,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 03:02:34,526 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:34,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:34,556 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2018-11-23 03:02:34,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:34,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 943 states to 486 states and 869 transitions. [2018-11-23 03:02:34,696 INFO L276 IsEmpty]: Start isEmpty. Operand 486 states and 869 transitions. [2018-11-23 03:02:34,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 03:02:34,697 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:34,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:34,716 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 19 proven. 11 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2018-11-23 03:02:34,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:34,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 944 states to 487 states and 870 transitions. [2018-11-23 03:02:34,870 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 870 transitions. [2018-11-23 03:02:34,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 03:02:34,871 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:34,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:34,890 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-11-23 03:02:35,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:35,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 948 states to 490 states and 874 transitions. [2018-11-23 03:02:35,127 INFO L276 IsEmpty]: Start isEmpty. Operand 490 states and 874 transitions. [2018-11-23 03:02:35,127 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 03:02:35,127 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:35,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:35,145 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 46 proven. 10 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2018-11-23 03:02:35,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:35,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 950 states to 492 states and 876 transitions. [2018-11-23 03:02:35,240 INFO L276 IsEmpty]: Start isEmpty. Operand 492 states and 876 transitions. [2018-11-23 03:02:35,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 03:02:35,241 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:35,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:35,320 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2018-11-23 03:02:35,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:35,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 954 states to 494 states and 880 transitions. [2018-11-23 03:02:35,547 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 880 transitions. [2018-11-23 03:02:35,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 03:02:35,548 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:35,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:35,584 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2018-11-23 03:02:35,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:35,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 959 states to 496 states and 885 transitions. [2018-11-23 03:02:35,780 INFO L276 IsEmpty]: Start isEmpty. Operand 496 states and 885 transitions. [2018-11-23 03:02:35,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 03:02:35,781 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:35,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:35,799 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-23 03:02:35,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:35,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 967 states to 501 states and 893 transitions. [2018-11-23 03:02:35,998 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 893 transitions. [2018-11-23 03:02:35,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 03:02:35,998 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:36,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:36,017 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2018-11-23 03:02:36,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:36,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 967 states to 502 states and 893 transitions. [2018-11-23 03:02:36,127 INFO L276 IsEmpty]: Start isEmpty. Operand 502 states and 893 transitions. [2018-11-23 03:02:36,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 03:02:36,128 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:36,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:36,146 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2018-11-23 03:02:36,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:36,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 970 states to 505 states and 896 transitions. [2018-11-23 03:02:36,335 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 896 transitions. [2018-11-23 03:02:36,335 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 03:02:36,335 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:36,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:36,354 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2018-11-23 03:02:36,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:36,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 973 states to 508 states and 899 transitions. [2018-11-23 03:02:36,373 INFO L276 IsEmpty]: Start isEmpty. Operand 508 states and 899 transitions. [2018-11-23 03:02:36,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 03:02:36,374 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:36,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:36,393 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2018-11-23 03:02:36,859 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:36,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 982 states to 512 states and 908 transitions. [2018-11-23 03:02:36,859 INFO L276 IsEmpty]: Start isEmpty. Operand 512 states and 908 transitions. [2018-11-23 03:02:36,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 03:02:36,860 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:36,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:36,882 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 19 proven. 11 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2018-11-23 03:02:37,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:37,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 983 states to 513 states and 909 transitions. [2018-11-23 03:02:37,040 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 909 transitions. [2018-11-23 03:02:37,040 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 03:02:37,040 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:37,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:37,059 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2018-11-23 03:02:37,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:37,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 983 states to 514 states and 909 transitions. [2018-11-23 03:02:37,067 INFO L276 IsEmpty]: Start isEmpty. Operand 514 states and 909 transitions. [2018-11-23 03:02:37,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 03:02:37,067 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:37,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:37,083 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2018-11-23 03:02:37,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:37,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 985 states to 516 states and 911 transitions. [2018-11-23 03:02:37,123 INFO L276 IsEmpty]: Start isEmpty. Operand 516 states and 911 transitions. [2018-11-23 03:02:37,124 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-23 03:02:37,124 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:37,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:37,149 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2018-11-23 03:02:37,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:37,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 997 states to 524 states and 923 transitions. [2018-11-23 03:02:37,383 INFO L276 IsEmpty]: Start isEmpty. Operand 524 states and 923 transitions. [2018-11-23 03:02:37,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 03:02:37,383 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:37,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:37,407 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 10 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:37,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:37,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1008 states to 531 states and 932 transitions. [2018-11-23 03:02:37,421 INFO L276 IsEmpty]: Start isEmpty. Operand 531 states and 932 transitions. [2018-11-23 03:02:37,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2018-11-23 03:02:37,422 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:37,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:37,438 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2018-11-23 03:02:37,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:37,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1008 states to 532 states and 932 transitions. [2018-11-23 03:02:37,498 INFO L276 IsEmpty]: Start isEmpty. Operand 532 states and 932 transitions. [2018-11-23 03:02:37,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2018-11-23 03:02:37,499 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:37,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:37,517 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2018-11-23 03:02:37,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:37,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1008 states to 533 states and 932 transitions. [2018-11-23 03:02:37,613 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 932 transitions. [2018-11-23 03:02:37,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 03:02:37,613 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:37,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:37,636 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 03:02:37,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:37,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1019 states to 540 states and 941 transitions. [2018-11-23 03:02:37,790 INFO L276 IsEmpty]: Start isEmpty. Operand 540 states and 941 transitions. [2018-11-23 03:02:37,791 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 03:02:37,791 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:37,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:37,814 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2018-11-23 03:02:37,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:37,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1031 states to 546 states and 953 transitions. [2018-11-23 03:02:37,842 INFO L276 IsEmpty]: Start isEmpty. Operand 546 states and 953 transitions. [2018-11-23 03:02:37,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 03:02:37,842 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:37,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:37,862 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2018-11-23 03:02:38,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:38,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1043 states to 551 states and 964 transitions. [2018-11-23 03:02:38,403 INFO L276 IsEmpty]: Start isEmpty. Operand 551 states and 964 transitions. [2018-11-23 03:02:38,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 03:02:38,404 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:38,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:38,422 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2018-11-23 03:02:38,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:38,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1047 states to 554 states and 968 transitions. [2018-11-23 03:02:38,629 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 968 transitions. [2018-11-23 03:02:38,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 03:02:38,629 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:38,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:38,648 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2018-11-23 03:02:39,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:39,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1052 states to 558 states and 973 transitions. [2018-11-23 03:02:39,037 INFO L276 IsEmpty]: Start isEmpty. Operand 558 states and 973 transitions. [2018-11-23 03:02:39,037 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 03:02:39,037 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:39,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:39,055 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2018-11-23 03:02:39,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:39,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1054 states to 560 states and 975 transitions. [2018-11-23 03:02:39,177 INFO L276 IsEmpty]: Start isEmpty. Operand 560 states and 975 transitions. [2018-11-23 03:02:39,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 03:02:39,178 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:39,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:39,197 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2018-11-23 03:02:39,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:39,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1057 states to 562 states and 978 transitions. [2018-11-23 03:02:39,354 INFO L276 IsEmpty]: Start isEmpty. Operand 562 states and 978 transitions. [2018-11-23 03:02:39,355 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 03:02:39,355 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:39,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:39,379 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 03:02:39,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:39,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1068 states to 569 states and 987 transitions. [2018-11-23 03:02:39,392 INFO L276 IsEmpty]: Start isEmpty. Operand 569 states and 987 transitions. [2018-11-23 03:02:39,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 03:02:39,392 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:39,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:39,587 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2018-11-23 03:02:39,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:39,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1070 states to 570 states and 989 transitions. [2018-11-23 03:02:39,909 INFO L276 IsEmpty]: Start isEmpty. Operand 570 states and 989 transitions. [2018-11-23 03:02:39,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 03:02:39,910 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:39,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:40,057 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2018-11-23 03:02:40,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:40,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1072 states to 571 states and 991 transitions. [2018-11-23 03:02:40,424 INFO L276 IsEmpty]: Start isEmpty. Operand 571 states and 991 transitions. [2018-11-23 03:02:40,424 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 03:02:40,424 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:40,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:40,633 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2018-11-23 03:02:41,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:41,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1073 states to 572 states and 992 transitions. [2018-11-23 03:02:41,056 INFO L276 IsEmpty]: Start isEmpty. Operand 572 states and 992 transitions. [2018-11-23 03:02:41,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 03:02:41,056 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:41,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 03:02:41,231 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2018-11-23 03:02:41,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:02:41,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1074 states to 573 states and 993 transitions. [2018-11-23 03:02:41,604 INFO L276 IsEmpty]: Start isEmpty. Operand 573 states and 993 transitions. [2018-11-23 03:02:41,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2018-11-23 03:02:41,605 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:02:41,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 03:02:41,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 03:02:42,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 03:02:42,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 03:02:42,537 WARN L493 CodeCheckObserver]: This program is UNSAFE, Check terminated with 120 iterations. ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28);call #t~string292.base, #t~string292.offset := #Ultimate.alloc(22);call #t~string295.base, #t~string295.offset := #Ultimate.alloc(9);call #t~string309.base, #t~string309.offset := #Ultimate.alloc(5);call write~init~int(118, #t~string309.base, #t~string309.offset, 1);call write~init~int(100, #t~string309.base, 1 + #t~string309.offset, 1);call write~init~int(37, #t~string309.base, 2 + #t~string309.offset, 1);call write~init~int(99, #t~string309.base, 3 + #t~string309.offset, 1);call write~init~int(0, #t~string309.base, 4 + #t~string309.offset, 1);call #t~string312.base, #t~string312.offset := #Ultimate.alloc(7);call write~init~int(118, #t~string312.base, #t~string312.offset, 1);call write~init~int(100, #t~string312.base, 1 + #t~string312.offset, 1);call write~init~int(37, #t~string312.base, 2 + #t~string312.offset, 1);call write~init~int(99, #t~string312.base, 3 + #t~string312.offset, 1);call write~init~int(37, #t~string312.base, 4 + #t~string312.offset, 1);call write~init~int(99, #t~string312.base, 5 + #t~string312.offset, 1);call write~init~int(0, #t~string312.base, 6 + #t~string312.offset, 1);call #t~string315.base, #t~string315.offset := #Ultimate.alloc(9);call #t~string390.base, #t~string390.offset := #Ultimate.alloc(11);call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8);call #t~string394.base, #t~string394.offset := #Ultimate.alloc(8);~LDV_IN_INTERRUPT~0 := 1;~ldv_state_variable_2~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_1~0 := 0;~ldv_state_variable_0~0 := 0;~major~0 := 0;~index~0 := 0;call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36);call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4);call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4);call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4);call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4);call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4);call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4);call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4);call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4);call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4);~ldv_retval_0~0 := 0;~ldv_retval_1~0 := 0;~ldv_blk_rq~0 := 0;~virtblk_fops_group0~0.base, ~virtblk_fops_group0~0.offset := 0, 0;~virtio_blk_group0~0.base, ~virtio_blk_group0~0.offset := 0, 0;call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8);call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16);call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4);call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4);call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4);call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4);call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141);call write~init~$Pointer$(#t~string390.base, #t~string390.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8);call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8);call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4);call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8);~__mod_virtio_device_table~0.device := 0;~__mod_virtio_device_table~0.vendor := 0;havoc main_#res;havoc main_#t~nondet397, main_#t~ret398.base, main_#t~ret398.offset, main_#t~nondet399, main_#t~memset~res400.base, main_#t~memset~res400.offset, main_#t~nondet401, main_#t~switch402, main_#t~nondet403, main_#t~switch404, main_#t~ret405, main_#t~nondet406, main_#t~switch407, main_#t~ret408, main_#t~nondet409, main_#t~switch410, main_#t~mem411, main_#t~ret412, main_#t~ret413, main_~ldvarg1~0, main_~tmp~28, main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset, main_~ldvarg0~0.base, main_~ldvarg0~0.offset, main_~tmp___0~15.base, main_~tmp___0~15.offset, main_~ldvarg2~0, main_~tmp___1~8, main_~tmp___2~4, main_~tmp___3~3, main_~tmp___4~2, main_~tmp___5~2;havoc main_~ldvarg1~0;havoc main_~tmp~28;call main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset := #Ultimate.alloc(4);havoc main_~ldvarg0~0.base, main_~ldvarg0~0.offset;havoc main_~tmp___0~15.base, main_~tmp___0~15.offset;havoc main_~ldvarg2~0;havoc main_~tmp___1~8;havoc main_~tmp___2~4;havoc main_~tmp___3~3;havoc main_~tmp___4~2;havoc main_~tmp___5~2;main_~tmp~28 := main_#t~nondet397;havoc main_#t~nondet397;main_~ldvarg1~0 := main_~tmp~28; VAL [ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call main_#t~ret398.base, main_#t~ret398.offset := ldv_zalloc(16); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_zalloc_#in~size|=16, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~7.base, ~tmp~7.offset;havoc ~tmp___0~4;assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647;~tmp___0~4 := #t~nondet133;havoc #t~nondet133;BeginParallelComposition{ParallelCodeBlock0: assume 0 != ~tmp___0~4;#res.base, #res.offset := 0, 0;ParallelCodeBlock1: assume !(0 != ~tmp___0~4);call #t~malloc134.base, #t~malloc134.offset := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296));#Ultimate.meminit_#ptr.base, #Ultimate.meminit_#ptr.offset, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134.base, #t~malloc134.offset, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296);#memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr.base);~tmp~7.base, ~tmp~7.offset := #t~malloc134.base, #t~malloc134.offset;~p~1.base, ~p~1.offset := ~tmp~7.base, ~tmp~7.offset;assume 0 != (if 0 != (~p~1.base + ~p~1.offset) % 18446744073709551616 then 1 else 0);#res.base, #res.offset := ~p~1.base, ~p~1.offset;}EndParallelCompositionassume true; VAL [ldv_zalloc_~p~1.base=2, ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=16, ldv_zalloc_~tmp___0~4=0, ldv_zalloc_~tmp~7.base=2, ldv_zalloc_~tmp~7.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_zalloc_#in~size|=16, |ldv_zalloc_#res.base|=2, |ldv_zalloc_#res.offset|=0, |ldv_zalloc_#t~malloc134.base|=2, |ldv_zalloc_#t~malloc134.offset|=0, |ldv_zalloc_#Ultimate.meminit_#amountOfFields|=1, |ldv_zalloc_#Ultimate.meminit_#product|=16, |ldv_zalloc_#Ultimate.meminit_#ptr.base|=2, |ldv_zalloc_#Ultimate.meminit_#ptr.offset|=0, |ldv_zalloc_#Ultimate.meminit_#sizeOfFields|=16, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] RET #1093#return; VAL [ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_main_#t~ret398.base|=2, |ULTIMATE.start_main_#t~ret398.offset|=0, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] main_~tmp___0~15.base, main_~tmp___0~15.offset := main_#t~ret398.base, main_#t~ret398.offset;havoc main_#t~ret398.base, main_#t~ret398.offset;main_~ldvarg0~0.base, main_~ldvarg0~0.offset := main_~tmp___0~15.base, main_~tmp___0~15.offset;main_~tmp___1~8 := main_#t~nondet399;havoc main_#t~nondet399;main_~ldvarg2~0 := main_~tmp___1~8;call ldv_initialize();#Ultimate.C_memset_#ptr.base, #Ultimate.C_memset_#ptr.offset, #Ultimate.C_memset_#value, #Ultimate.C_memset_#amount := main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset, 0, 4;havoc #Ultimate.C_memset_#res.base, #Ultimate.C_memset_#res.offset;havoc #Ultimate.C_memset_#t~loopctr424;#Ultimate.C_memset_#t~loopctr424 := 0; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=0, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount;#memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256];#Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=1, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount;#memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256];#Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=2, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount;#memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256];#Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=3, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount;#memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value];#memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256];#Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !(#Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount);assume #Ultimate.C_memset_#res.base == #Ultimate.C_memset_#ptr.base && #Ultimate.C_memset_#res.offset == #Ultimate.C_memset_#ptr.offset;main_#t~memset~res400.base, main_#t~memset~res400.offset := #Ultimate.C_memset_#res.base, #Ultimate.C_memset_#res.offset;havoc main_#t~memset~res400.base, main_#t~memset~res400.offset;~ldv_state_variable_1~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 1;~ldv_state_variable_2~0 := 0; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647;main_~tmp___2~4 := main_#t~nondet401;havoc main_#t~nondet401;main_#t~switch402 := 0 == main_~tmp___2~4; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_#t~switch402|=false, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !main_#t~switch402;main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume main_#t~switch402; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 0 != ~ldv_state_variable_0~0;assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647;main_~tmp___4~2 := main_#t~nondet406;havoc main_#t~nondet406;main_#t~switch407 := 0 == main_~tmp___4~2; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=false, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !main_#t~switch407;main_#t~switch407 := main_#t~switch407 || 1 == main_~tmp___4~2; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume main_#t~switch407; VAL [ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 1 == ~ldv_state_variable_0~0;havoc init_#res;havoc init_#t~ret392, init_#t~ret393, init_~tmp~25;havoc init_~tmp~25;call init_#t~ret392 := register_blkdev(0, #t~string391.base, #t~string391.offset);assume -2147483648 <= init_#t~ret392 && init_#t~ret392 <= 2147483647;~major~0 := init_#t~ret392;havoc init_#t~ret392;BeginParallelComposition{ParallelCodeBlock0: assume ~major~0 < 0;init_#res := ~major~0;ParallelCodeBlock1: assume !(~major~0 < 0);call init_#t~ret393 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset);assume -2147483648 <= init_#t~ret393 && init_#t~ret393 <= 2147483647;init_~tmp~25 := init_#t~ret393;havoc init_#t~ret393;init_#res := init_~tmp~25;}EndParallelCompositionmain_#t~ret408 := init_#res;assume -2147483648 <= main_#t~ret408 && main_#t~ret408 <= 2147483647;~ldv_retval_1~0 := main_#t~ret408;havoc main_#t~ret408; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 0 == ~ldv_retval_1~0;~ldv_state_variable_0~0 := 3;~ldv_state_variable_2~0 := 1;havoc ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset, ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset;havoc ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset := ldv_zalloc(464); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_zalloc_#in~size|=464, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~7.base, ~tmp~7.offset;havoc ~tmp___0~4;assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647;~tmp___0~4 := #t~nondet133;havoc #t~nondet133;BeginParallelComposition{ParallelCodeBlock0: assume 0 != ~tmp___0~4;#res.base, #res.offset := 0, 0;ParallelCodeBlock1: assume !(0 != ~tmp___0~4);call #t~malloc134.base, #t~malloc134.offset := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296));#Ultimate.meminit_#ptr.base, #Ultimate.meminit_#ptr.offset, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134.base, #t~malloc134.offset, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296);#memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr.base);~tmp~7.base, ~tmp~7.offset := #t~malloc134.base, #t~malloc134.offset;~p~1.base, ~p~1.offset := ~tmp~7.base, ~tmp~7.offset;assume 0 != (if 0 != (~p~1.base + ~p~1.offset) % 18446744073709551616 then 1 else 0);#res.base, #res.offset := ~p~1.base, ~p~1.offset;}EndParallelCompositionassume true; VAL [ldv_zalloc_~p~1.base=(- 142482651225332576681985), ldv_zalloc_~p~1.offset=0, ldv_zalloc_~size=464, ldv_zalloc_~tmp___0~4=0, ldv_zalloc_~tmp~7.base=(- 142482651225332576681985), ldv_zalloc_~tmp~7.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_zalloc_#in~size|=464, |ldv_zalloc_#res.base|=(- 142482651225332576681985), |ldv_zalloc_#res.offset|=0, |ldv_zalloc_#t~malloc134.base|=(- 142482651225332576681985), |ldv_zalloc_#t~malloc134.offset|=0, |ldv_zalloc_#Ultimate.meminit_#amountOfFields|=1, |ldv_zalloc_#Ultimate.meminit_#product|=464, |ldv_zalloc_#Ultimate.meminit_#ptr.base|=(- 142482651225332576681985), |ldv_zalloc_#Ultimate.meminit_#ptr.offset|=0, |ldv_zalloc_#Ultimate.meminit_#sizeOfFields|=464, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] RET #1137#return; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_ldv_initialize_block_device_operations_2_#t~ret396.base|=(- 142482651225332576681985), |ULTIMATE.start_ldv_initialize_block_device_operations_2_#t~ret396.offset|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset := ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset;havoc ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset;~virtblk_fops_group0~0.base, ~virtblk_fops_group0~0.offset := ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset;~ldv_state_variable_1~0 := 1;havoc ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset, ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset;havoc ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset := ldv_zalloc(1048); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_zalloc_#in~size|=1048, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~7.base, ~tmp~7.offset;havoc ~tmp___0~4;assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647;~tmp___0~4 := #t~nondet133;havoc #t~nondet133;BeginParallelComposition{ParallelCodeBlock0: assume 0 != ~tmp___0~4;#res.base, #res.offset := 0, 0;ParallelCodeBlock1: assume !(0 != ~tmp___0~4);call #t~malloc134.base, #t~malloc134.offset := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296));#Ultimate.meminit_#ptr.base, #Ultimate.meminit_#ptr.offset, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134.base, #t~malloc134.offset, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296);#memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr.base);~tmp~7.base, ~tmp~7.offset := #t~malloc134.base, #t~malloc134.offset;~p~1.base, ~p~1.offset := ~tmp~7.base, ~tmp~7.offset;assume 0 != (if 0 != (~p~1.base + ~p~1.offset) % 18446744073709551616 then 1 else 0);#res.base, #res.offset := ~p~1.base, ~p~1.offset;}EndParallelCompositionassume true; VAL [ldv_zalloc_~p~1.base=18446744073709553691, ldv_zalloc_~p~1.offset=(- 1), ldv_zalloc_~size=1048, ldv_zalloc_~tmp___0~4=(- 1), ldv_zalloc_~tmp~7.base=62, ldv_zalloc_~tmp~7.offset=58, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_zalloc_#in~size|=1048, |ldv_zalloc_#res.base|=0, |ldv_zalloc_#res.offset|=0, |ldv_zalloc_#t~malloc134.base|=63, |ldv_zalloc_#t~malloc134.offset|=55, |ldv_zalloc_#Ultimate.meminit_#amountOfFields|=60, |ldv_zalloc_#Ultimate.meminit_#product|=59, |ldv_zalloc_#Ultimate.meminit_#ptr.base|=66, |ldv_zalloc_#Ultimate.meminit_#ptr.offset|=67, |ldv_zalloc_#Ultimate.meminit_#sizeOfFields|=61, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] RET #1139#return; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_ldv_initialize_virtio_driver_1_#t~ret395.base|=0, |ULTIMATE.start_ldv_initialize_virtio_driver_1_#t~ret395.offset|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset := ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset;havoc ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset;~virtio_blk_group0~0.base, ~virtio_blk_group0~0.offset := ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !(0 != ~ldv_retval_1~0); VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647;main_~tmp___2~4 := main_#t~nondet401;havoc main_#t~nondet401;main_#t~switch402 := 0 == main_~tmp___2~4; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=false, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !main_#t~switch402;main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=false, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !main_#t~switch402;main_#t~switch402 := main_#t~switch402 || 2 == main_~tmp___2~4; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume main_#t~switch402; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 0 != ~ldv_state_variable_2~0;assume -2147483648 <= main_#t~nondet409 && main_#t~nondet409 <= 2147483647;main_~tmp___5~2 := main_#t~nondet409;havoc main_#t~nondet409;main_#t~switch410 := 0 == main_~tmp___5~2; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume main_#t~switch410; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 1 == ~ldv_state_variable_2~0;call main_#t~mem411 := read~int(main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset, 4);virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := ~virtblk_fops_group0~0.base, ~virtblk_fops_group0~0.offset, main_#t~mem411, main_~ldvarg2~0, main_~ldvarg1~0;havoc virtblk_ioctl_#res;havoc virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset, virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271.base, virtblk_ioctl_#t~mem271.offset, virtblk_ioctl_#t~ret272, virtblk_ioctl_#t~mem273.base, virtblk_ioctl_#t~mem273.offset, virtblk_ioctl_#t~ret274, virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset, virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~21, virtblk_ioctl_~tmp___0~12, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2;virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset := virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset;virtblk_ioctl_~mode := virtblk_ioctl_#in~mode;virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd;virtblk_ioctl_~data := virtblk_ioctl_#in~data;havoc virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset;havoc virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset;havoc virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset;call virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset := #Ultimate.alloc(20);havoc virtblk_ioctl_~err~1;havoc virtblk_ioctl_~tmp~21;havoc virtblk_ioctl_~tmp___0~12;havoc virtblk_ioctl_~tmp___1~6;havoc virtblk_ioctl_~tmp___2~2;call virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset := read~$Pointer$(virtblk_ioctl_~bdev.base, 240 + virtblk_ioctl_~bdev.offset, 8);virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset := virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset;havoc virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset;call virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset := read~$Pointer$(virtblk_ioctl_~disk~0.base, 1075 + virtblk_ioctl_~disk~0.offset, 8);virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset := virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset;havoc virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 1447184708 == virtblk_ioctl_~cmd % 4294967296;virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset := 0, (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset, virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset := virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset;havoc virtblk_get_id_#res;havoc virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset, virtblk_get_id_#t~mem253.base, virtblk_get_id_#t~mem253.offset, virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset, virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset, virtblk_get_id_#t~ret256, virtblk_get_id_#t~ret257, virtblk_get_id_#t~mem258.base, virtblk_get_id_#t~mem258.offset, virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset, virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset, virtblk_get_id_#t~ret261, virtblk_get_id_#t~ret262, virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset, virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset, virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset, virtblk_get_id_#t~ret266, virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, virtblk_get_id_~tmp~20, virtblk_get_id_~tmp___0~11, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1;virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset := virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset;virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset := virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset;havoc virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset;havoc virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset;havoc virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset;havoc virtblk_get_id_~tmp~20;havoc virtblk_get_id_~tmp___0~11;havoc virtblk_get_id_~tmp___1~5;havoc virtblk_get_id_~tmp___2~1;havoc virtblk_get_id_~tmp___3~1;call virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset := read~$Pointer$(virtblk_get_id_~disk.base, 1075 + virtblk_get_id_~disk.offset, 8);virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset := virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset;havoc virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset;call virtblk_get_id_#t~mem253.base, virtblk_get_id_#t~mem253.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset := read~$Pointer$(virtblk_get_id_#t~mem253.base, 1067 + virtblk_get_id_#t~mem253.offset, 8);call virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset := bio_map_kern(virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, 20, 208);virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset := virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset;havoc virtblk_get_id_#t~mem253.base, virtblk_get_id_#t~mem253.offset;havoc virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset;havoc virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call virtblk_get_id_#t~ret256 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~31; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0);assume true; VAL [ldv_is_err_~ptr.base=0, ldv_is_err_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |ldv_is_err_#res|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] RET #1169#return; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#t~ret416|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807;~tmp~31 := #t~ret416;havoc #t~ret416;#res := ~tmp~31;assume true; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, IS_ERR_~tmp~31=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#res|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] RET #1143#return; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~ret256|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume -9223372036854775808 <= virtblk_get_id_#t~ret256 && virtblk_get_id_#t~ret256 <= 9223372036854775807;virtblk_get_id_~tmp___0~11 := virtblk_get_id_#t~ret256;havoc virtblk_get_id_#t~ret256; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !(0 != virtblk_get_id_~tmp___0~11);call virtblk_get_id_#t~mem258.base, virtblk_get_id_#t~mem258.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset := read~$Pointer$(virtblk_get_id_#t~mem258.base, 1067 + virtblk_get_id_#t~mem258.offset, 8);ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset, ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, 208;havoc ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset;havoc ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset, ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset;ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset := ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset;ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset := ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset;ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3;havoc ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset;ldv_blk_make_request_#in~mask := ldv_blk_make_request_5_~ldv_func_arg3;havoc ldv_blk_make_request_#res.base, ldv_blk_make_request_#res.offset;havoc ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset, ldv_blk_make_request_#t~ret422, ldv_blk_make_request_~mask, ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset, ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset, ldv_blk_make_request_~tmp___0~17;ldv_blk_make_request_~mask := ldv_blk_make_request_#in~mask;havoc ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset;havoc ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset;havoc ldv_blk_make_request_~tmp___0~17; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem258.base|=78, |ULTIMATE.start_virtblk_get_id_#t~mem258.offset|=2468, |ULTIMATE.start_virtblk_get_id_#t~mem259.base|=77, |ULTIMATE.start_virtblk_get_id_#t~mem259.offset|=83, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 0 == ~ldv_blk_rq~0; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem258.base|=78, |ULTIMATE.start_virtblk_get_id_#t~mem258.offset|=2468, |ULTIMATE.start_virtblk_get_id_#t~mem259.base|=77, |ULTIMATE.start_virtblk_get_id_#t~mem259.offset|=83, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset := ldv_undef_ptr(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] havoc ~tmp~9.base, ~tmp~9.offset;~tmp~9.base, ~tmp~9.offset := #t~nondet136.base, #t~nondet136.offset;havoc #t~nondet136.base, #t~nondet136.offset;#res.base, #res.offset := ~tmp~9.base, ~tmp~9.offset;assume true; VAL [ldv_undef_ptr_~tmp~9.base=18446744073709553690, ldv_undef_ptr_~tmp~9.offset=(- 62), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_undef_ptr_#res.base|=18446744073709553690, |ldv_undef_ptr_#res.offset|=(- 62), |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] RET #1149#return; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#t~ret421.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#t~ret421.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem258.base|=78, |ULTIMATE.start_virtblk_get_id_#t~mem258.offset|=2468, |ULTIMATE.start_virtblk_get_id_#t~mem259.base|=77, |ULTIMATE.start_virtblk_get_id_#t~mem259.offset|=83, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset := ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset;havoc ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset;ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset := ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem258.base|=78, |ULTIMATE.start_virtblk_get_id_#t~mem258.offset|=2468, |ULTIMATE.start_virtblk_get_id_#t~mem259.base|=77, |ULTIMATE.start_virtblk_get_id_#t~mem259.offset|=83, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 0 != (ldv_blk_make_request_~res~1.base + ldv_blk_make_request_~res~1.offset) % 18446744073709551616; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem258.base|=78, |ULTIMATE.start_virtblk_get_id_#t~mem258.offset|=2468, |ULTIMATE.start_virtblk_get_id_#t~mem259.base|=77, |ULTIMATE.start_virtblk_get_id_#t~mem259.offset|=83, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] IS_ERR___0_#in~ptr.base, IS_ERR___0_#in~ptr.offset := ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset;havoc IS_ERR___0_#res;havoc IS_ERR___0_#t~ret419, IS_ERR___0_~ptr.base, IS_ERR___0_~ptr.offset, IS_ERR___0_~tmp~34;IS_ERR___0_~ptr.base, IS_ERR___0_~ptr.offset := IS_ERR___0_#in~ptr.base, IS_ERR___0_#in~ptr.offset;havoc IS_ERR___0_~tmp~34; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem258.base|=78, |ULTIMATE.start_virtblk_get_id_#t~mem258.offset|=2468, |ULTIMATE.start_virtblk_get_id_#t~mem259.base|=77, |ULTIMATE.start_virtblk_get_id_#t~mem259.offset|=83, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call IS_ERR___0_#t~ret419 := ldv__builtin_expect((if !!((IS_ERR___0_~ptr.base + IS_ERR___0_~ptr.offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv__builtin_expect_#in~c|=0, |ldv__builtin_expect_#in~exp|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ~exp := #in~exp;~c := #in~c;#res := ~exp;assume true; VAL [ldv__builtin_expect_~c=0, ldv__builtin_expect_~exp=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv__builtin_expect_#in~c|=0, |ldv__builtin_expect_#in~exp|=0, |ldv__builtin_expect_#res|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] RET #1153#return; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#t~ret419|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem258.base|=78, |ULTIMATE.start_virtblk_get_id_#t~mem258.offset|=2468, |ULTIMATE.start_virtblk_get_id_#t~mem259.base|=77, |ULTIMATE.start_virtblk_get_id_#t~mem259.offset|=83, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume -9223372036854775808 <= IS_ERR___0_#t~ret419 && IS_ERR___0_#t~ret419 <= 9223372036854775807;IS_ERR___0_~tmp~34 := IS_ERR___0_#t~ret419;havoc IS_ERR___0_#t~ret419;IS_ERR___0_#res := IS_ERR___0_~tmp~34;ldv_blk_make_request_#t~ret422 := IS_ERR___0_#res;assume -9223372036854775808 <= ldv_blk_make_request_#t~ret422 && ldv_blk_make_request_#t~ret422 <= 9223372036854775807;ldv_blk_make_request_~tmp___0~17 := ldv_blk_make_request_#t~ret422;havoc ldv_blk_make_request_#t~ret422;BeginParallelComposition{ParallelCodeBlock0: assume 0 != ldv_blk_make_request_~tmp___0~17;ParallelCodeBlock1: assume !(0 != ldv_blk_make_request_~tmp___0~17);~ldv_blk_rq~0 := 1;}EndParallelCompositionldv_blk_make_request_#res.base, ldv_blk_make_request_#res.offset := ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset;ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset := ldv_blk_make_request_#res.base, ldv_blk_make_request_#res.offset;ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset := ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset;havoc ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset;ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset := ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset;virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset := ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset;virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset := virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset;havoc virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset;havoc virtblk_get_id_#t~mem258.base, virtblk_get_id_#t~mem258.offset;havoc virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call virtblk_get_id_#t~ret261 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709553690, |IS_ERR_#in~ptr.offset|=(- 62), |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~31; VAL [IS_ERR_~ptr.base=18446744073709553690, IS_ERR_~ptr.offset=(- 62), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709553690, |IS_ERR_#in~ptr.offset|=(- 62), |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_is_err_#in~ptr.base|=18446744073709553690, |ldv_is_err_#in~ptr.offset|=(- 62), |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0);assume true; VAL [ldv_is_err_~ptr.base=18446744073709553690, ldv_is_err_~ptr.offset=(- 62), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ldv_is_err_#in~ptr.base|=18446744073709553690, |ldv_is_err_#in~ptr.offset|=(- 62), |ldv_is_err_#res|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] RET #1169#return; VAL [IS_ERR_~ptr.base=18446744073709553690, IS_ERR_~ptr.offset=(- 62), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709553690, |IS_ERR_#in~ptr.offset|=(- 62), |IS_ERR_#t~ret416|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807;~tmp~31 := #t~ret416;havoc #t~ret416;#res := ~tmp~31;assume true; VAL [IS_ERR_~ptr.base=18446744073709553690, IS_ERR_~ptr.offset=(- 62), IS_ERR_~tmp~31=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709553690, |IS_ERR_#in~ptr.offset|=(- 62), |IS_ERR_#res|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] RET #1155#return; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~ret261|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume -9223372036854775808 <= virtblk_get_id_#t~ret261 && virtblk_get_id_#t~ret261 <= 9223372036854775807;virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret261;havoc virtblk_get_id_#t~ret261; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !(0 != virtblk_get_id_~tmp___2~1);call write~int(7, virtblk_get_id_~req~1.base, 64 + virtblk_get_id_~req~1.offset, 4);call virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset := read~$Pointer$(virtblk_get_id_#t~mem263.base, 1067 + virtblk_get_id_#t~mem263.offset, 8);call virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~ret266 := blk_execute_rq(virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset, virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, 0);assume -2147483648 <= virtblk_get_id_#t~ret266 && virtblk_get_id_#t~ret266 <= 2147483647;virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret266;havoc virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset;havoc virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset;havoc virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset;havoc virtblk_get_id_#t~ret266;virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=74, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] virtblk_ioctl_#t~ret269 := virtblk_get_id_#res;assume -2147483648 <= virtblk_ioctl_#t~ret269 && virtblk_ioctl_#t~ret269 <= 2147483647;virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret269;havoc virtblk_ioctl_#t~ret269;BeginParallelComposition{ParallelCodeBlock0: assume !(0 == virtblk_ioctl_~err~1);ParallelCodeBlock1: assume 0 == virtblk_ioctl_~err~1;copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset, copy_to_user_#in~src.base, copy_to_user_#in~src.offset, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, 20;havoc copy_to_user_#res;havoc copy_to_user_#t~ret36, copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size, copy_to_user_~tmp~0;copy_to_user_~dst.base, copy_to_user_~dst.offset := copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset;copy_to_user_~src.base, copy_to_user_~src.offset := copy_to_user_#in~src.base, copy_to_user_#in~src.offset;copy_to_user_~size := copy_to_user_#in~size;havoc copy_to_user_~tmp~0;call might_fault();call copy_to_user_#t~ret36 := _copy_to_user(copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size);copy_to_user_~tmp~0 := copy_to_user_#t~ret36;havoc copy_to_user_#t~ret36;copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296);virtblk_ioctl_#t~ret270 := copy_to_user_#res;assume -2147483648 <= virtblk_ioctl_#t~ret270 && virtblk_ioctl_#t~ret270 <= 2147483647;virtblk_ioctl_~tmp~21 := virtblk_ioctl_#t~ret270;havoc virtblk_ioctl_#t~ret270;BeginParallelComposition{ParallelCodeBlock0: assume 0 != virtblk_ioctl_~tmp~21;virtblk_ioctl_~err~1 := -14;ParallelCodeBlock1: assume !(0 != virtblk_ioctl_~tmp~21);}EndParallelComposition}EndParallelCompositionvirtblk_ioctl_#res := virtblk_ioctl_~err~1;call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset);havoc virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=9223372036854775807, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=74, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=2147483648, ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~tmp~21=(- 2147483648), ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=9223372036854775807, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=74, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=(- 2147483648), |ULTIMATE.start_copy_to_user_#t~ret36|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~mem411|=0, |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret270|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] main_#t~ret412 := virtblk_ioctl_#res;assume -2147483648 <= main_#t~ret412 && main_#t~ret412 <= 2147483647;havoc main_#t~mem411;havoc main_#t~ret412;~ldv_state_variable_2~0 := 1; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=9223372036854775807, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=74, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=2147483648, ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=2, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~tmp~21=(- 2147483648), ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=9223372036854775807, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=74, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=(- 2147483648), |ULTIMATE.start_copy_to_user_#t~ret36|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret270|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647;main_~tmp___2~4 := main_#t~nondet401;havoc main_#t~nondet401;main_#t~switch402 := 0 == main_~tmp___2~4; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=9223372036854775807, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=74, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=2147483648, ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~tmp~21=(- 2147483648), ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=9223372036854775807, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=74, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=(- 2147483648), |ULTIMATE.start_copy_to_user_#t~ret36|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~switch402|=false, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret270|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !main_#t~switch402;main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=9223372036854775807, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=74, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=2147483648, ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~tmp~21=(- 2147483648), ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=9223372036854775807, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=74, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=(- 2147483648), |ULTIMATE.start_copy_to_user_#t~ret36|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret270|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume main_#t~switch402; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=9223372036854775807, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=74, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=2147483648, ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=1, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~tmp~21=(- 2147483648), ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=9223372036854775807, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=74, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=(- 2147483648), |ULTIMATE.start_copy_to_user_#t~ret36|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret270|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 0 != ~ldv_state_variable_0~0;assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647;main_~tmp___4~2 := main_#t~nondet406;havoc main_#t~nondet406;main_#t~switch407 := 0 == main_~tmp___4~2; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=9223372036854775807, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=74, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=2147483648, ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=0, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~tmp~21=(- 2147483648), ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=9223372036854775807, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=74, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=(- 2147483648), |ULTIMATE.start_copy_to_user_#t~ret36|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret270|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume main_#t~switch407; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=9223372036854775807, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=74, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=2147483648, ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=0, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~tmp~21=(- 2147483648), ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=9223372036854775807, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=74, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=(- 2147483648), |ULTIMATE.start_copy_to_user_#t~ret36|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret270|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume 3 == ~ldv_state_variable_0~0 && 0 == ~ref_cnt~0;call unregister_blkdev(~major~0, #t~string394.base, #t~string394.offset);call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset);~ldv_state_variable_0~0 := 2; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=9223372036854775807, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=74, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=2147483648, ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=0, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~tmp~21=(- 2147483648), ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=9223372036854775807, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=74, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=(- 2147483648), |ULTIMATE.start_copy_to_user_#t~ret36|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret270|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !(0 == ~ldv_blk_rq~0); VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=9223372036854775807, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=74, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=2147483648, ULTIMATE.start_init_~tmp~25=0, ULTIMATE.start_IS_ERR___0_~ptr.base=18446744073709553690, ULTIMATE.start_IS_ERR___0_~ptr.offset=(- 62), ULTIMATE.start_IS_ERR___0_~tmp~34=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=77, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_5_~tmp~32.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~mask=208, ULTIMATE.start_ldv_blk_make_request_~res~1.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~res~1.offset=(- 62), ULTIMATE.start_ldv_blk_make_request_~tmp___0~17=0, ULTIMATE.start_ldv_blk_make_request_~tmp~36.base=18446744073709553690, ULTIMATE.start_ldv_blk_make_request_~tmp~36.offset=(- 62), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.base=(- 142482651225332576681985), ULTIMATE.start_ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.base=0, ULTIMATE.start_ldv_initialize_virtio_driver_1_~tmp~26.offset=0, ULTIMATE.start_main_~ldvarg0~0.base=2, ULTIMATE.start_main_~ldvarg0~0.offset=0, ULTIMATE.start_main_~ldvarg1~0=9223372036854775807, ULTIMATE.start_main_~ldvarg2~0=1447184708, ULTIMATE.start_main_~tmp___0~15.base=2, ULTIMATE.start_main_~tmp___0~15.offset=0, ULTIMATE.start_main_~tmp___1~8=1447184708, ULTIMATE.start_main_~tmp___2~4=1, ULTIMATE.start_main_~tmp___4~2=0, ULTIMATE.start_main_~tmp___5~2=0, ULTIMATE.start_main_~tmp~28=9223372036854775807, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=70, ULTIMATE.start_virtblk_get_id_~disk.offset=4159, ULTIMATE.start_virtblk_get_id_~id_str.base=74, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709553690, ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 62), ULTIMATE.start_virtblk_get_id_~tmp___0~11=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=76, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=(- 4429), ULTIMATE.start_virtblk_ioctl_~bdev.base=(- 142482651225332576681985), ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~disk~0.base=70, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=4159, ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=0, ULTIMATE.start_virtblk_ioctl_~tmp~21=(- 2147483648), ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=9223372036854775807, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=76, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=(- 4429), |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#amount|=4, |ULTIMATE.start_#Ultimate.C_memset_#ptr.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#ptr.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#res.base|=18446744073709553690, |ULTIMATE.start_#Ultimate.C_memset_#res.offset|=0, |ULTIMATE.start_#Ultimate.C_memset_#t~loopctr424|=4, |ULTIMATE.start_#Ultimate.C_memset_#value|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=9223372036854775807, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=74, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=(- 2147483648), |ULTIMATE.start_copy_to_user_#t~ret36|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret393|=0, |ULTIMATE.start_IS_ERR___0_#in~ptr.base|=18446744073709553690, |ULTIMATE.start_IS_ERR___0_#in~ptr.offset|=(- 62), |ULTIMATE.start_IS_ERR___0_#res|=0, |ULTIMATE.start_ldv_blk_make_request_#in~mask|=208, |ULTIMATE.start_ldv_blk_make_request_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_#res.offset|=(- 62), |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=77, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=83, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709553690, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 62), |ULTIMATE.start_main_#t~switch402|=true, |ULTIMATE.start_main_#t~switch407|=true, |ULTIMATE.start_main_#t~switch410|=true, |ULTIMATE.start_main_~#ldvarg3~0.base|=18446744073709553690, |ULTIMATE.start_main_~#ldvarg3~0.offset|=0, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=70, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=4159, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=74, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=(- 142482651225332576681985), |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=9223372036854775807, |ULTIMATE.start_virtblk_ioctl_#in~mode|=0, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret270|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] CALL call ldv_error(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !false; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=26, |#t~string108.offset|=0, |#t~string292.base|=25, |#t~string292.offset|=0, |#t~string295.base|=23, |#t~string295.offset|=0, |#t~string309.base|=66, |#t~string309.offset|=0, |#t~string312.base|=21, |#t~string312.offset|=0, |#t~string315.base|=19, |#t~string315.offset|=0, |#t~string390.base|=38, |#t~string390.offset|=0, |#t~string391.base|=30, |#t~string391.offset|=0, |#t~string394.base|=29, |#t~string394.offset|=0, |~#__this_module~0.base|=44, |~#__this_module~0.offset|=39, |~#features~0.base|=45, |~#features~0.offset|=0, |~#id_table~0.base|=46, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=17, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=13, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=(- 142482651225332576681985), ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3323] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28); [L4239] call #t~string292.base, #t~string292.offset := #Ultimate.alloc(22); [L4243] call #t~string295.base, #t~string295.offset := #Ultimate.alloc(9); [L4277] call #t~string309.base, #t~string309.offset := #Ultimate.alloc(5); [L4277] call write~init~int(118, #t~string309.base, #t~string309.offset, 1); [L4277] call write~init~int(100, #t~string309.base, 1 + #t~string309.offset, 1); [L4277] call write~init~int(37, #t~string309.base, 2 + #t~string309.offset, 1); [L4277] call write~init~int(99, #t~string309.base, 3 + #t~string309.offset, 1); [L4277] call write~init~int(0, #t~string309.base, 4 + #t~string309.offset, 1); [L4280] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(7); [L4280] call write~init~int(118, #t~string312.base, #t~string312.offset, 1); [L4280] call write~init~int(100, #t~string312.base, 1 + #t~string312.offset, 1); [L4280] call write~init~int(37, #t~string312.base, 2 + #t~string312.offset, 1); [L4280] call write~init~int(99, #t~string312.base, 3 + #t~string312.offset, 1); [L4280] call write~init~int(37, #t~string312.base, 4 + #t~string312.offset, 1); [L4280] call write~init~int(99, #t~string312.base, 5 + #t~string312.offset, 1); [L4280] call write~init~int(0, #t~string312.base, 6 + #t~string312.offset, 1); [L4285] call #t~string315.base, #t~string315.offset := #Ultimate.alloc(9); [L4400] call #t~string390.base, #t~string390.offset := #Ultimate.alloc(11); [L4407] call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8); [L4422] call #t~string394.base, #t~string394.offset := #Ultimate.alloc(8); [L3672] ~LDV_IN_INTERRUPT~0 := 1; [L3674] ~ldv_state_variable_2~0 := 0; [L3675] ~ref_cnt~0 := 0; [L3676] ~ldv_state_variable_1~0 := 0; [L3678] ~ldv_state_variable_0~0 := 0; [L3823] ~major~0 := 0; [L3824] ~index~0 := 0; [L4396-L4399] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36); [L4396-L4399] call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4); [L4396-L4399] call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4); [L4428] ~ldv_retval_0~0 := 0; [L4429] ~ldv_retval_1~0 := 0; [L4695] ~ldv_blk_rq~0 := 0; [L3673] ~virtblk_fops_group0~0.base, ~virtblk_fops_group0~0.offset := 0, 0; [L3677] ~virtio_blk_group0~0.base, ~virtio_blk_group0~0.offset := 0, 0; [L4177-L4178] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8); [L4394-L4395] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16); [L4394-L4395] call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4); [L4394-L4395] call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4); [L4394-L4395] call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4); [L4394-L4395] call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4); [L4400-L4401] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141); [L4400-L4401] call write~init~$Pointer$(#t~string390.base, #t~string390.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4); [L4400-L4401] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8); [L4427] ~__mod_virtio_device_table~0.device := 0; [L4427] ~__mod_virtio_device_table~0.vendor := 0; [?] havoc main_#res; [?] havoc main_#t~nondet397, main_#t~ret398.base, main_#t~ret398.offset, main_#t~nondet399, main_#t~memset~res400.base, main_#t~memset~res400.offset, main_#t~nondet401, main_#t~switch402, main_#t~nondet403, main_#t~switch404, main_#t~ret405, main_#t~nondet406, main_#t~switch407, main_#t~ret408, main_#t~nondet409, main_#t~switch410, main_#t~mem411, main_#t~ret412, main_#t~ret413, main_~ldvarg1~0, main_~tmp~28, main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset, main_~ldvarg0~0.base, main_~ldvarg0~0.offset, main_~tmp___0~15.base, main_~tmp___0~15.offset, main_~ldvarg2~0, main_~tmp___1~8, main_~tmp___2~4, main_~tmp___3~3, main_~tmp___4~2, main_~tmp___5~2; [L4454] havoc main_~ldvarg1~0; [L4455] havoc main_~tmp~28; [L4456] call main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset := #Ultimate.alloc(4); [L4457] havoc main_~ldvarg0~0.base, main_~ldvarg0~0.offset; [L4458] havoc main_~tmp___0~15.base, main_~tmp___0~15.offset; [L4459] havoc main_~ldvarg2~0; [L4460] havoc main_~tmp___1~8; [L4461] havoc main_~tmp___2~4; [L4462] havoc main_~tmp___3~3; [L4463] havoc main_~tmp___4~2; [L4464] havoc main_~tmp___5~2; [L4467] main_~tmp~28 := main_#t~nondet397; [L4467] havoc main_#t~nondet397; [L4468] main_~ldvarg1~0 := main_~tmp~28; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4469] CALL call main_#t~ret398.base, main_#t~ret398.offset := ldv_zalloc(16); VAL [#in~size=16, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1.base, ~p~1.offset; [L3595] havoc ~tmp~7.base, ~tmp~7.offset; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600-L3607] assume !(0 != ~tmp___0~4); [L3603] call #t~malloc134.base, #t~malloc134.offset := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [L3603] #Ultimate.meminit_#ptr.base, #Ultimate.meminit_#ptr.offset, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134.base, #t~malloc134.offset, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr.base); [L3603] ~tmp~7.base, ~tmp~7.offset := #t~malloc134.base, #t~malloc134.offset; [L3604] ~p~1.base, ~p~1.offset := ~tmp~7.base, ~tmp~7.offset; [L3605] assume 0 != (if 0 != (~p~1.base + ~p~1.offset) % 18446744073709551616 then 1 else 0); [L3606] #res.base, #res.offset := ~p~1.base, ~p~1.offset; [L3592-L3609] ensures true; VAL [#in~size=16, #NULL.base=0, #NULL.offset=0, #res.base=2, #res.offset=0, #t~malloc134.base=2, #t~malloc134.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.meminit_#amountOfFields=1, #Ultimate.meminit_#product=16, #Ultimate.meminit_#ptr.base=2, #Ultimate.meminit_#ptr.offset=0, #Ultimate.meminit_#sizeOfFields=16, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~p~1.base=2, ~p~1.offset=0, ~ref_cnt~0=0, ~size=16, ~tmp___0~4=0, ~tmp~7.base=2, ~tmp~7.offset=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4469] RET call main_#t~ret398.base, main_#t~ret398.offset := ldv_zalloc(16); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, main_#t~ret398.base=2, main_#t~ret398.offset=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4469] main_~tmp___0~15.base, main_~tmp___0~15.offset := main_#t~ret398.base, main_#t~ret398.offset; [L4469] havoc main_#t~ret398.base, main_#t~ret398.offset; [L4470] main_~ldvarg0~0.base, main_~ldvarg0~0.offset := main_~tmp___0~15.base, main_~tmp___0~15.offset; [L4471] main_~tmp___1~8 := main_#t~nondet399; [L4471] havoc main_#t~nondet399; [L4472] main_~ldvarg2~0 := main_~tmp___1~8; [L4473] call ldv_initialize(); [L4474] #Ultimate.C_memset_#ptr.base, #Ultimate.C_memset_#ptr.offset, #Ultimate.C_memset_#value, #Ultimate.C_memset_#amount := main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset, 0, 4; [L4474] havoc #Ultimate.C_memset_#res.base, #Ultimate.C_memset_#res.offset; [L4474] havoc #Ultimate.C_memset_#t~loopctr424; [?] #Ultimate.C_memset_#t~loopctr424 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=0, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount; [?] #memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value]; [?] #memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256]; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=1, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount; [?] #memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value]; [?] #memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256]; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=2, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount; [?] #memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value]; [?] #memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256]; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=3, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount; [?] #memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value]; [?] #memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256]; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !(#Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount); [?] assume #Ultimate.C_memset_#res.base == #Ultimate.C_memset_#ptr.base && #Ultimate.C_memset_#res.offset == #Ultimate.C_memset_#ptr.offset; [L4474] main_#t~memset~res400.base, main_#t~memset~res400.offset := #Ultimate.C_memset_#res.base, #Ultimate.C_memset_#res.offset; [L4474] havoc main_#t~memset~res400.base, main_#t~memset~res400.offset; [L4475] ~ldv_state_variable_1~0 := 0; [L4476] ~ref_cnt~0 := 0; [L4477] ~ldv_state_variable_0~0 := 1; [L4478] ~ldv_state_variable_2~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=false, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4482] assume !main_#t~switch402; [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4516] assume main_#t~switch402; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4517-L4557] assume 0 != ~ldv_state_variable_0~0; [L4518] assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647; [L4518] main_~tmp___4~2 := main_#t~nondet406; [L4518] havoc main_#t~nondet406; [L4520] main_#t~switch407 := 0 == main_~tmp___4~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=false, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4520] assume !main_#t~switch407; [L4529] main_#t~switch407 := main_#t~switch407 || 1 == main_~tmp___4~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4529] assume main_#t~switch407; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4530-L4549] assume 1 == ~ldv_state_variable_0~0; [L4531] havoc init_#res; [L4531] havoc init_#t~ret392, init_#t~ret393, init_~tmp~25; [L4404] havoc init_~tmp~25; [L4407] call init_#t~ret392 := register_blkdev(0, #t~string391.base, #t~string391.offset); [L4407] assume -2147483648 <= init_#t~ret392 && init_#t~ret392 <= 2147483647; [L4407] ~major~0 := init_#t~ret392; [L4407] havoc init_#t~ret392; [L4408-L4412] assume !(~major~0 < 0); [L4413] call init_#t~ret393 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4413] assume -2147483648 <= init_#t~ret393 && init_#t~ret393 <= 2147483647; [L4413] init_~tmp~25 := init_#t~ret393; [L4413] havoc init_#t~ret393; [L4414] init_#res := init_~tmp~25; [L4531] main_#t~ret408 := init_#res; [L4531] assume -2147483648 <= main_#t~ret408 && main_#t~ret408 <= 2147483647; [L4531] ~ldv_retval_1~0 := main_#t~ret408; [L4531] havoc main_#t~ret408; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4532-L4540] assume 0 == ~ldv_retval_1~0; [L4533] ~ldv_state_variable_0~0 := 3; [L4534] ~ldv_state_variable_2~0 := 1; [L4535] havoc ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset, ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset; [L4444] havoc ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4447] CALL call ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset := ldv_zalloc(464); VAL [#in~size=464, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1.base, ~p~1.offset; [L3595] havoc ~tmp~7.base, ~tmp~7.offset; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600-L3607] assume !(0 != ~tmp___0~4); [L3603] call #t~malloc134.base, #t~malloc134.offset := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [L3603] #Ultimate.meminit_#ptr.base, #Ultimate.meminit_#ptr.offset, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134.base, #t~malloc134.offset, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr.base); [L3603] ~tmp~7.base, ~tmp~7.offset := #t~malloc134.base, #t~malloc134.offset; [L3604] ~p~1.base, ~p~1.offset := ~tmp~7.base, ~tmp~7.offset; [L3605] assume 0 != (if 0 != (~p~1.base + ~p~1.offset) % 18446744073709551616 then 1 else 0); [L3606] #res.base, #res.offset := ~p~1.base, ~p~1.offset; [L3592-L3609] ensures true; VAL [#in~size=464, #NULL.base=0, #NULL.offset=0, #res.base=-142482651225332576681985, #res.offset=0, #t~malloc134.base=-142482651225332576681985, #t~malloc134.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.meminit_#amountOfFields=1, #Ultimate.meminit_#product=464, #Ultimate.meminit_#ptr.base=-142482651225332576681985, #Ultimate.meminit_#ptr.offset=0, #Ultimate.meminit_#sizeOfFields=464, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~p~1.base=-142482651225332576681985, ~p~1.offset=0, ~ref_cnt~0=0, ~size=464, ~tmp___0~4=0, ~tmp~7.base=-142482651225332576681985, ~tmp~7.offset=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4447] RET call ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset := ldv_zalloc(464); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_#t~ret396.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_#t~ret396.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4447] ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset := ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset; [L4447] havoc ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset; [L4448] ~virtblk_fops_group0~0.base, ~virtblk_fops_group0~0.offset := ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset; [L4536] ~ldv_state_variable_1~0 := 1; [L4537] havoc ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset, ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset; [L4434] havoc ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4437] CALL call ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset := ldv_zalloc(1048); VAL [#in~size=1048, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1.base, ~p~1.offset; [L3595] havoc ~tmp~7.base, ~tmp~7.offset; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600-L3607] assume 0 != ~tmp___0~4; [L3601] #res.base, #res.offset := 0, 0; [L3592-L3609] ensures true; VAL [#in~size=1048, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~malloc134.base=63, #t~malloc134.offset=55, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.meminit_#amountOfFields=60, #Ultimate.meminit_#product=59, #Ultimate.meminit_#ptr.base=66, #Ultimate.meminit_#ptr.offset=67, #Ultimate.meminit_#sizeOfFields=61, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~p~1.base=18446744073709553691, ~p~1.offset=-1, ~ref_cnt~0=0, ~size=1048, ~tmp___0~4=-1, ~tmp~7.base=62, ~tmp~7.offset=58, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4437] RET call ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset := ldv_zalloc(1048); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_#t~ret395.base=0, ldv_initialize_virtio_driver_1_#t~ret395.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4437] ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset := ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset; [L4437] havoc ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset; [L4438] ~virtio_blk_group0~0.base, ~virtio_blk_group0~0.offset := ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4541-L4546] assume !(0 != ~ldv_retval_1~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=false, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4482] assume !main_#t~switch402; [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=false, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4516] assume !main_#t~switch402; [L4559] main_#t~switch402 := main_#t~switch402 || 2 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4559] assume main_#t~switch402; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4560-L4585] assume 0 != ~ldv_state_variable_2~0; [L4561] assume -2147483648 <= main_#t~nondet409 && main_#t~nondet409 <= 2147483647; [L4561] main_~tmp___5~2 := main_#t~nondet409; [L4561] havoc main_#t~nondet409; [L4563] main_#t~switch410 := 0 == main_~tmp___5~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4563] assume main_#t~switch410; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4564-L4569] assume 1 == ~ldv_state_variable_2~0; [L4565] call main_#t~mem411 := read~int(main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset, 4); [L4565] virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := ~virtblk_fops_group0~0.base, ~virtblk_fops_group0~0.offset, main_#t~mem411, main_~ldvarg2~0, main_~ldvarg1~0; [L4565] havoc virtblk_ioctl_#res; [L4565] havoc virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset, virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271.base, virtblk_ioctl_#t~mem271.offset, virtblk_ioctl_#t~ret272, virtblk_ioctl_#t~mem273.base, virtblk_ioctl_#t~mem273.offset, virtblk_ioctl_#t~ret274, virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset, virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~21, virtblk_ioctl_~tmp___0~12, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4106-L4153] virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset := virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset; [L4106-L4153] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4106-L4153] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4106-L4153] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4109] havoc virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset; [L4110] havoc virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset; [L4111] havoc virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset; [L4112] call virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset := #Ultimate.alloc(20); [L4113] havoc virtblk_ioctl_~err~1; [L4114] havoc virtblk_ioctl_~tmp~21; [L4115] havoc virtblk_ioctl_~tmp___0~12; [L4116] havoc virtblk_ioctl_~tmp___1~6; [L4117] havoc virtblk_ioctl_~tmp___2~2; [L4120] call virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset := read~$Pointer$(virtblk_ioctl_~bdev.base, 240 + virtblk_ioctl_~bdev.offset, 8); [L4120] virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset := virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset; [L4120] havoc virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset; [L4121] call virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset := read~$Pointer$(virtblk_ioctl_~disk~0.base, 1075 + virtblk_ioctl_~disk~0.offset, 8); [L4121] virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset := virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset; [L4121] havoc virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4122-L4138] assume 1447184708 == virtblk_ioctl_~cmd % 4294967296; [L4123] virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset := 0, (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4124] virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset, virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset := virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; [L4124] havoc virtblk_get_id_#res; [L4124] havoc virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset, virtblk_get_id_#t~mem253.base, virtblk_get_id_#t~mem253.offset, virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset, virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset, virtblk_get_id_#t~ret256, virtblk_get_id_#t~ret257, virtblk_get_id_#t~mem258.base, virtblk_get_id_#t~mem258.offset, virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset, virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset, virtblk_get_id_#t~ret261, virtblk_get_id_#t~ret262, virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset, virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset, virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset, virtblk_get_id_#t~ret266, virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, virtblk_get_id_~tmp~20, virtblk_get_id_~tmp___0~11, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1; [L4071-L4105] virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset := virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset; [L4071-L4105] virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset := virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset; [L4073] havoc virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset; [L4074] havoc virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset; [L4075] havoc virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset; [L4076] havoc virtblk_get_id_~tmp~20; [L4077] havoc virtblk_get_id_~tmp___0~11; [L4078] havoc virtblk_get_id_~tmp___1~5; [L4079] havoc virtblk_get_id_~tmp___2~1; [L4080] havoc virtblk_get_id_~tmp___3~1; [L4083] call virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset := read~$Pointer$(virtblk_get_id_~disk.base, 1075 + virtblk_get_id_~disk.offset, 8); [L4083] virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset := virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset; [L4083] havoc virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset; [L4084] call virtblk_get_id_#t~mem253.base, virtblk_get_id_#t~mem253.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4084] call virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset := read~$Pointer$(virtblk_get_id_#t~mem253.base, 1067 + virtblk_get_id_#t~mem253.offset, 8); [L4084] call virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset := bio_map_kern(virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, 20, 208); [L4084] virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset := virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset; [L4084] havoc virtblk_get_id_#t~mem253.base, virtblk_get_id_#t~mem253.offset; [L4084] havoc virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset; [L4084] havoc virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4085] CALL call virtblk_get_id_#t~ret256 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4615-L4623] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4617] havoc ~tmp~31; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4643-L4650] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4648] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3297] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] RET call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret416=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L3119] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~ref_cnt~0=0, ~tmp~31=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4085] RET call virtblk_get_id_#t~ret256 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret256=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4085] assume -9223372036854775808 <= virtblk_get_id_#t~ret256 && virtblk_get_id_#t~ret256 <= 9223372036854775807; [L4085] virtblk_get_id_~tmp___0~11 := virtblk_get_id_#t~ret256; [L4085] havoc virtblk_get_id_#t~ret256; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4086-L4091] assume !(0 != virtblk_get_id_~tmp___0~11); [L4092] call virtblk_get_id_#t~mem258.base, virtblk_get_id_#t~mem258.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4092] call virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset := read~$Pointer$(virtblk_get_id_#t~mem258.base, 1067 + virtblk_get_id_#t~mem258.offset, 8); [L4092] ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset, ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, 208; [L4092] havoc ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L4092] havoc ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset, ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset := ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset := ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4627] havoc ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset; [L4630] ldv_blk_make_request_#in~mask := ldv_blk_make_request_5_~ldv_func_arg3; [L4630] havoc ldv_blk_make_request_#res.base, ldv_blk_make_request_#res.offset; [L4630] havoc ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset, ldv_blk_make_request_#t~ret422, ldv_blk_make_request_~mask, ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset, ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset, ldv_blk_make_request_~tmp___0~17; [L4726-L4753] ldv_blk_make_request_~mask := ldv_blk_make_request_#in~mask; [L4728] havoc ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset; [L4729] havoc ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset; [L4730] havoc ldv_blk_make_request_~tmp___0~17; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4733-L4737] assume 0 == ~ldv_blk_rq~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4738] CALL call ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset := ldv_undef_ptr(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3621] havoc ~tmp~9.base, ~tmp~9.offset; [L3624] ~tmp~9.base, ~tmp~9.offset := #t~nondet136.base, #t~nondet136.offset; [L3624] havoc #t~nondet136.base, #t~nondet136.offset; [L3625] #res.base, #res.offset := ~tmp~9.base, ~tmp~9.offset; [L3619-L3627] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res.base=18446744073709553690, #res.offset=-62, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~tmp~9.base=18446744073709553690, ~tmp~9.offset=-62, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4738] RET call ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset := ldv_undef_ptr(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#t~ret421.base=18446744073709553690, ldv_blk_make_request_#t~ret421.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4738] ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset := ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset; [L4738] havoc ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset; [L4739] ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset := ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4740-L4744] assume 0 != (ldv_blk_make_request_~res~1.base + ldv_blk_make_request_~res~1.offset) % 18446744073709551616; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4745] IS_ERR___0_#in~ptr.base, IS_ERR___0_#in~ptr.offset := ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset; [L4745] havoc IS_ERR___0_#res; [L4745] havoc IS_ERR___0_#t~ret419, IS_ERR___0_~ptr.base, IS_ERR___0_~ptr.offset, IS_ERR___0_~tmp~34; [L4686-L4694] IS_ERR___0_~ptr.base, IS_ERR___0_~ptr.offset := IS_ERR___0_#in~ptr.base, IS_ERR___0_#in~ptr.offset; [L4688] havoc IS_ERR___0_~tmp~34; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4691] CALL call IS_ERR___0_#t~ret419 := ldv__builtin_expect((if !!((IS_ERR___0_~ptr.base + IS_ERR___0_~ptr.offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#in~c=0, #in~exp=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3655-L3662] ~exp := #in~exp; [L3655-L3662] ~c := #in~c; [L3660] #res := ~exp; [L3083] ensures true; VAL [#in~c=0, #in~exp=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~c=0, ~exp=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4691] RET call IS_ERR___0_#t~ret419 := ldv__builtin_expect((if !!((IS_ERR___0_~ptr.base + IS_ERR___0_~ptr.offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#t~ret419=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4691] assume -9223372036854775808 <= IS_ERR___0_#t~ret419 && IS_ERR___0_#t~ret419 <= 9223372036854775807; [L4691] IS_ERR___0_~tmp~34 := IS_ERR___0_#t~ret419; [L4691] havoc IS_ERR___0_#t~ret419; [L4692] IS_ERR___0_#res := IS_ERR___0_~tmp~34; [L4745] ldv_blk_make_request_#t~ret422 := IS_ERR___0_#res; [L4745] assume -9223372036854775808 <= ldv_blk_make_request_#t~ret422 && ldv_blk_make_request_#t~ret422 <= 9223372036854775807; [L4745] ldv_blk_make_request_~tmp___0~17 := ldv_blk_make_request_#t~ret422; [L4745] havoc ldv_blk_make_request_#t~ret422; [L4746-L4750] assume !(0 != ldv_blk_make_request_~tmp___0~17); [L4749] ~ldv_blk_rq~0 := 1; [L4751] ldv_blk_make_request_#res.base, ldv_blk_make_request_#res.offset := ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset; [L4630] ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset := ldv_blk_make_request_#res.base, ldv_blk_make_request_#res.offset; [L4630] ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset := ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset; [L4630] havoc ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset; [L4631] ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset := ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset; [L4092] virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset := ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L4092] virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset := virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset; [L4092] havoc virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset; [L4092] havoc virtblk_get_id_#t~mem258.base, virtblk_get_id_#t~mem258.offset; [L4092] havoc virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4093] CALL call virtblk_get_id_#t~ret261 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4615-L4623] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4617] havoc ~tmp~31; VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=18446744073709553690, ~ptr.offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4643-L4650] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4648] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3297] ensures true; VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=18446744073709553690, ~ptr.offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] RET call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #t~ret416=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=18446744073709553690, ~ptr.offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L3119] ensures true; VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=18446744073709553690, ~ptr.offset=-62, ~ref_cnt~0=0, ~tmp~31=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4093] RET call virtblk_get_id_#t~ret261 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret261=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4093] assume -9223372036854775808 <= virtblk_get_id_#t~ret261 && virtblk_get_id_#t~ret261 <= 9223372036854775807; [L4093] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret261; [L4093] havoc virtblk_get_id_#t~ret261; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4094-L4100] assume !(0 != virtblk_get_id_~tmp___2~1); [L4101] call write~int(7, virtblk_get_id_~req~1.base, 64 + virtblk_get_id_~req~1.offset, 4); [L4102] call virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4102] call virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset := read~$Pointer$(virtblk_get_id_#t~mem263.base, 1067 + virtblk_get_id_#t~mem263.offset, 8); [L4102] call virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4102] call virtblk_get_id_#t~ret266 := blk_execute_rq(virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset, virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, 0); [L4102] assume -2147483648 <= virtblk_get_id_#t~ret266 && virtblk_get_id_#t~ret266 <= 2147483647; [L4102] virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret266; [L4102] havoc virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset; [L4102] havoc virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset; [L4102] havoc virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset; [L4102] havoc virtblk_get_id_#t~ret266; [L4103] virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4124] virtblk_ioctl_#t~ret269 := virtblk_get_id_#res; [L4124] assume -2147483648 <= virtblk_ioctl_#t~ret269 && virtblk_ioctl_#t~ret269 <= 2147483647; [L4124] virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret269; [L4124] havoc virtblk_ioctl_#t~ret269; [L4125-L4134] assume 0 == virtblk_ioctl_~err~1; [L4126] copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset, copy_to_user_#in~src.base, copy_to_user_#in~src.offset, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, 20; [L4126] havoc copy_to_user_#res; [L4126] havoc copy_to_user_#t~ret36, copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size, copy_to_user_~tmp~0; [L3214-L3223] copy_to_user_~dst.base, copy_to_user_~dst.offset := copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset; [L3214-L3223] copy_to_user_~src.base, copy_to_user_~src.offset := copy_to_user_#in~src.base, copy_to_user_#in~src.offset; [L3214-L3223] copy_to_user_~size := copy_to_user_#in~size; [L3216] havoc copy_to_user_~tmp~0; [L3219] call might_fault(); [L3220] call copy_to_user_#t~ret36 := _copy_to_user(copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size); [L3220] copy_to_user_~tmp~0 := copy_to_user_#t~ret36; [L3220] havoc copy_to_user_#t~ret36; [L3221] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4126] virtblk_ioctl_#t~ret270 := copy_to_user_#res; [L4126] assume -2147483648 <= virtblk_ioctl_#t~ret270 && virtblk_ioctl_#t~ret270 <= 2147483647; [L4126] virtblk_ioctl_~tmp~21 := virtblk_ioctl_#t~ret270; [L4126] havoc virtblk_ioctl_#t~ret270; [L4127-L4131] assume 0 != virtblk_ioctl_~tmp~21; [L4128] virtblk_ioctl_~err~1 := -14; [L4135] virtblk_ioctl_#res := virtblk_ioctl_~err~1; [L4112] call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset); [L4135] havoc virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4565] main_#t~ret412 := virtblk_ioctl_#res; [L4565] assume -2147483648 <= main_#t~ret412 && main_#t~ret412 <= 2147483647; [L4565] havoc main_#t~mem411; [L4565] havoc main_#t~ret412; [L4566] ~ldv_state_variable_2~0 := 1; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=false, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4482] assume !main_#t~switch402; [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4516] assume main_#t~switch402; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4517-L4557] assume 0 != ~ldv_state_variable_0~0; [L4518] assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647; [L4518] main_~tmp___4~2 := main_#t~nondet406; [L4518] havoc main_#t~nondet406; [L4520] main_#t~switch407 := 0 == main_~tmp___4~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4520] assume main_#t~switch407; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4521-L4527] assume 3 == ~ldv_state_variable_0~0 && 0 == ~ref_cnt~0; [L4422] call unregister_blkdev(~major~0, #t~string394.base, #t~string394.offset); [L4423] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4523] ~ldv_state_variable_0~0 := 2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4773-L4777] assume !(0 == ~ldv_blk_rq~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4776] CALL call ldv_error(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3643] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] ----- [2018-11-23 03:02:43,051 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,052 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,052 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,053 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,053 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,054 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,054 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,055 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,055 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,055 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,057 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,058 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,058 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,058 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,058 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,058 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,059 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,059 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,059 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,059 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,060 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,060 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,060 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,060 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,060 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,061 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,061 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,061 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,064 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,064 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,065 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,065 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,065 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,065 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,065 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,066 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,066 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,066 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,066 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,066 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,067 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,067 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,067 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,067 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,067 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,068 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,068 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,068 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,068 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,069 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,069 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,069 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,069 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,069 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,070 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,070 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,070 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,070 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,071 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,071 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,071 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,071 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,071 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,072 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,072 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,072 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,072 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,072 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,073 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,073 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,073 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,073 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,073 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,074 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,094 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,094 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,094 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,094 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,094 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,094 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,095 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,095 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,095 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,095 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,095 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,095 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,096 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,096 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,096 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,096 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,096 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,096 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,096 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,096 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,096 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,097 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,097 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,097 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,097 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,097 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,098 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,098 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,098 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,098 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,099 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,099 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,100 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,100 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,100 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,100 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,100 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,100 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,101 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,101 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,101 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,101 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,101 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,101 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,101 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,101 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,103 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,103 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,103 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,103 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,104 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,104 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,104 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,104 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,105 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,105 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,105 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,105 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,105 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,106 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,106 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,106 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,107 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,107 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,107 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,108 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,108 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,108 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,108 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,111 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,112 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,112 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,112 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,112 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,113 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,113 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,113 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,113 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,113 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,114 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,114 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,114 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,114 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,115 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,115 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,115 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,115 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,115 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,116 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,116 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,116 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,116 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,116 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,117 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,117 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,117 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,117 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,118 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,118 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,118 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,118 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,119 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,119 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,119 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,119 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,119 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,120 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,120 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,120 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,120 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,121 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,121 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,121 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,121 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,121 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,122 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled [2018-11-23 03:02:43,122 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled [2018-11-23 03:02:43,124 WARN L416 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3323] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28); [L4239] call #t~string292.base, #t~string292.offset := #Ultimate.alloc(22); [L4243] call #t~string295.base, #t~string295.offset := #Ultimate.alloc(9); [L4277] call #t~string309.base, #t~string309.offset := #Ultimate.alloc(5); [L4277] call write~init~int(118, #t~string309.base, #t~string309.offset, 1); [L4277] call write~init~int(100, #t~string309.base, 1 + #t~string309.offset, 1); [L4277] call write~init~int(37, #t~string309.base, 2 + #t~string309.offset, 1); [L4277] call write~init~int(99, #t~string309.base, 3 + #t~string309.offset, 1); [L4277] call write~init~int(0, #t~string309.base, 4 + #t~string309.offset, 1); [L4280] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(7); [L4280] call write~init~int(118, #t~string312.base, #t~string312.offset, 1); [L4280] call write~init~int(100, #t~string312.base, 1 + #t~string312.offset, 1); [L4280] call write~init~int(37, #t~string312.base, 2 + #t~string312.offset, 1); [L4280] call write~init~int(99, #t~string312.base, 3 + #t~string312.offset, 1); [L4280] call write~init~int(37, #t~string312.base, 4 + #t~string312.offset, 1); [L4280] call write~init~int(99, #t~string312.base, 5 + #t~string312.offset, 1); [L4280] call write~init~int(0, #t~string312.base, 6 + #t~string312.offset, 1); [L4285] call #t~string315.base, #t~string315.offset := #Ultimate.alloc(9); [L4400] call #t~string390.base, #t~string390.offset := #Ultimate.alloc(11); [L4407] call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8); [L4422] call #t~string394.base, #t~string394.offset := #Ultimate.alloc(8); [L3672] ~LDV_IN_INTERRUPT~0 := 1; [L3674] ~ldv_state_variable_2~0 := 0; [L3675] ~ref_cnt~0 := 0; [L3676] ~ldv_state_variable_1~0 := 0; [L3678] ~ldv_state_variable_0~0 := 0; [L3823] ~major~0 := 0; [L3824] ~index~0 := 0; [L4396-L4399] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36); [L4396-L4399] call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4); [L4396-L4399] call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4); [L4396-L4399] call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4); [L4428] ~ldv_retval_0~0 := 0; [L4429] ~ldv_retval_1~0 := 0; [L4695] ~ldv_blk_rq~0 := 0; [L3673] ~virtblk_fops_group0~0.base, ~virtblk_fops_group0~0.offset := 0, 0; [L3677] ~virtio_blk_group0~0.base, ~virtio_blk_group0~0.offset := 0, 0; [L4177-L4178] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8); [L4177-L4178] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8); [L4394-L4395] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16); [L4394-L4395] call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4); [L4394-L4395] call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4); [L4394-L4395] call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4); [L4394-L4395] call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4); [L4400-L4401] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141); [L4400-L4401] call write~init~$Pointer$(#t~string390.base, #t~string390.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4); [L4400-L4401] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8); [L4400-L4401] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8); [L4427] ~__mod_virtio_device_table~0.device := 0; [L4427] ~__mod_virtio_device_table~0.vendor := 0; [?] havoc main_#res; [?] havoc main_#t~nondet397, main_#t~ret398.base, main_#t~ret398.offset, main_#t~nondet399, main_#t~memset~res400.base, main_#t~memset~res400.offset, main_#t~nondet401, main_#t~switch402, main_#t~nondet403, main_#t~switch404, main_#t~ret405, main_#t~nondet406, main_#t~switch407, main_#t~ret408, main_#t~nondet409, main_#t~switch410, main_#t~mem411, main_#t~ret412, main_#t~ret413, main_~ldvarg1~0, main_~tmp~28, main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset, main_~ldvarg0~0.base, main_~ldvarg0~0.offset, main_~tmp___0~15.base, main_~tmp___0~15.offset, main_~ldvarg2~0, main_~tmp___1~8, main_~tmp___2~4, main_~tmp___3~3, main_~tmp___4~2, main_~tmp___5~2; [L4454] havoc main_~ldvarg1~0; [L4455] havoc main_~tmp~28; [L4456] call main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset := #Ultimate.alloc(4); [L4457] havoc main_~ldvarg0~0.base, main_~ldvarg0~0.offset; [L4458] havoc main_~tmp___0~15.base, main_~tmp___0~15.offset; [L4459] havoc main_~ldvarg2~0; [L4460] havoc main_~tmp___1~8; [L4461] havoc main_~tmp___2~4; [L4462] havoc main_~tmp___3~3; [L4463] havoc main_~tmp___4~2; [L4464] havoc main_~tmp___5~2; [L4467] main_~tmp~28 := main_#t~nondet397; [L4467] havoc main_#t~nondet397; [L4468] main_~ldvarg1~0 := main_~tmp~28; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4469] CALL call main_#t~ret398.base, main_#t~ret398.offset := ldv_zalloc(16); VAL [#in~size=16, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1.base, ~p~1.offset; [L3595] havoc ~tmp~7.base, ~tmp~7.offset; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600-L3607] assume !(0 != ~tmp___0~4); [L3603] call #t~malloc134.base, #t~malloc134.offset := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [L3603] #Ultimate.meminit_#ptr.base, #Ultimate.meminit_#ptr.offset, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134.base, #t~malloc134.offset, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr.base); [L3603] ~tmp~7.base, ~tmp~7.offset := #t~malloc134.base, #t~malloc134.offset; [L3604] ~p~1.base, ~p~1.offset := ~tmp~7.base, ~tmp~7.offset; [L3605] assume 0 != (if 0 != (~p~1.base + ~p~1.offset) % 18446744073709551616 then 1 else 0); [L3606] #res.base, #res.offset := ~p~1.base, ~p~1.offset; [L3592-L3609] ensures true; VAL [#in~size=16, #NULL.base=0, #NULL.offset=0, #res.base=2, #res.offset=0, #t~malloc134.base=2, #t~malloc134.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.meminit_#amountOfFields=1, #Ultimate.meminit_#product=16, #Ultimate.meminit_#ptr.base=2, #Ultimate.meminit_#ptr.offset=0, #Ultimate.meminit_#sizeOfFields=16, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~p~1.base=2, ~p~1.offset=0, ~ref_cnt~0=0, ~size=16, ~tmp___0~4=0, ~tmp~7.base=2, ~tmp~7.offset=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4469] RET call main_#t~ret398.base, main_#t~ret398.offset := ldv_zalloc(16); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, main_#t~ret398.base=2, main_#t~ret398.offset=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4469] main_~tmp___0~15.base, main_~tmp___0~15.offset := main_#t~ret398.base, main_#t~ret398.offset; [L4469] havoc main_#t~ret398.base, main_#t~ret398.offset; [L4470] main_~ldvarg0~0.base, main_~ldvarg0~0.offset := main_~tmp___0~15.base, main_~tmp___0~15.offset; [L4471] main_~tmp___1~8 := main_#t~nondet399; [L4471] havoc main_#t~nondet399; [L4472] main_~ldvarg2~0 := main_~tmp___1~8; [L4473] call ldv_initialize(); [L4474] #Ultimate.C_memset_#ptr.base, #Ultimate.C_memset_#ptr.offset, #Ultimate.C_memset_#value, #Ultimate.C_memset_#amount := main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset, 0, 4; [L4474] havoc #Ultimate.C_memset_#res.base, #Ultimate.C_memset_#res.offset; [L4474] havoc #Ultimate.C_memset_#t~loopctr424; [?] #Ultimate.C_memset_#t~loopctr424 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=0, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount; [?] #memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value]; [?] #memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256]; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=1, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount; [?] #memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value]; [?] #memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256]; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=2, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount; [?] #memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value]; [?] #memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256]; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=3, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount; [?] #memory_int := #memory_int[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value]; [?] #memory_$Pointer$.base, #memory_$Pointer$.offset := #memory_$Pointer$.base[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := 0], #memory_$Pointer$.offset[#Ultimate.C_memset_#ptr.base,#Ultimate.C_memset_#ptr.offset + #Ultimate.C_memset_#t~loopctr424 := #Ultimate.C_memset_#value % 256]; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] assume !(#Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount); [?] assume #Ultimate.C_memset_#res.base == #Ultimate.C_memset_#ptr.base && #Ultimate.C_memset_#res.offset == #Ultimate.C_memset_#ptr.offset; [L4474] main_#t~memset~res400.base, main_#t~memset~res400.offset := #Ultimate.C_memset_#res.base, #Ultimate.C_memset_#res.offset; [L4474] havoc main_#t~memset~res400.base, main_#t~memset~res400.offset; [L4475] ~ldv_state_variable_1~0 := 0; [L4476] ~ref_cnt~0 := 0; [L4477] ~ldv_state_variable_0~0 := 1; [L4478] ~ldv_state_variable_2~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=false, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4482] assume !main_#t~switch402; [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4516] assume main_#t~switch402; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4517-L4557] assume 0 != ~ldv_state_variable_0~0; [L4518] assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647; [L4518] main_~tmp___4~2 := main_#t~nondet406; [L4518] havoc main_#t~nondet406; [L4520] main_#t~switch407 := 0 == main_~tmp___4~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=false, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4520] assume !main_#t~switch407; [L4529] main_#t~switch407 := main_#t~switch407 || 1 == main_~tmp___4~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4529] assume main_#t~switch407; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4530-L4549] assume 1 == ~ldv_state_variable_0~0; [L4531] havoc init_#res; [L4531] havoc init_#t~ret392, init_#t~ret393, init_~tmp~25; [L4404] havoc init_~tmp~25; [L4407] call init_#t~ret392 := register_blkdev(0, #t~string391.base, #t~string391.offset); [L4407] assume -2147483648 <= init_#t~ret392 && init_#t~ret392 <= 2147483647; [L4407] ~major~0 := init_#t~ret392; [L4407] havoc init_#t~ret392; [L4408-L4412] assume !(~major~0 < 0); [L4413] call init_#t~ret393 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4413] assume -2147483648 <= init_#t~ret393 && init_#t~ret393 <= 2147483647; [L4413] init_~tmp~25 := init_#t~ret393; [L4413] havoc init_#t~ret393; [L4414] init_#res := init_~tmp~25; [L4531] main_#t~ret408 := init_#res; [L4531] assume -2147483648 <= main_#t~ret408 && main_#t~ret408 <= 2147483647; [L4531] ~ldv_retval_1~0 := main_#t~ret408; [L4531] havoc main_#t~ret408; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4532-L4540] assume 0 == ~ldv_retval_1~0; [L4533] ~ldv_state_variable_0~0 := 3; [L4534] ~ldv_state_variable_2~0 := 1; [L4535] havoc ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset, ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset; [L4444] havoc ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4447] CALL call ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset := ldv_zalloc(464); VAL [#in~size=464, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1.base, ~p~1.offset; [L3595] havoc ~tmp~7.base, ~tmp~7.offset; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600-L3607] assume !(0 != ~tmp___0~4); [L3603] call #t~malloc134.base, #t~malloc134.offset := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [L3603] #Ultimate.meminit_#ptr.base, #Ultimate.meminit_#ptr.offset, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134.base, #t~malloc134.offset, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr.base); [L3603] ~tmp~7.base, ~tmp~7.offset := #t~malloc134.base, #t~malloc134.offset; [L3604] ~p~1.base, ~p~1.offset := ~tmp~7.base, ~tmp~7.offset; [L3605] assume 0 != (if 0 != (~p~1.base + ~p~1.offset) % 18446744073709551616 then 1 else 0); [L3606] #res.base, #res.offset := ~p~1.base, ~p~1.offset; [L3592-L3609] ensures true; VAL [#in~size=464, #NULL.base=0, #NULL.offset=0, #res.base=-142482651225332576681985, #res.offset=0, #t~malloc134.base=-142482651225332576681985, #t~malloc134.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.meminit_#amountOfFields=1, #Ultimate.meminit_#product=464, #Ultimate.meminit_#ptr.base=-142482651225332576681985, #Ultimate.meminit_#ptr.offset=0, #Ultimate.meminit_#sizeOfFields=464, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~p~1.base=-142482651225332576681985, ~p~1.offset=0, ~ref_cnt~0=0, ~size=464, ~tmp___0~4=0, ~tmp~7.base=-142482651225332576681985, ~tmp~7.offset=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4447] RET call ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset := ldv_zalloc(464); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_#t~ret396.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_#t~ret396.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=0, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4447] ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset := ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset; [L4447] havoc ldv_initialize_block_device_operations_2_#t~ret396.base, ldv_initialize_block_device_operations_2_#t~ret396.offset; [L4448] ~virtblk_fops_group0~0.base, ~virtblk_fops_group0~0.offset := ldv_initialize_block_device_operations_2_~tmp~27.base, ldv_initialize_block_device_operations_2_~tmp~27.offset; [L4536] ~ldv_state_variable_1~0 := 1; [L4537] havoc ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset, ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset; [L4434] havoc ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4437] CALL call ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset := ldv_zalloc(1048); VAL [#in~size=1048, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1.base, ~p~1.offset; [L3595] havoc ~tmp~7.base, ~tmp~7.offset; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600-L3607] assume 0 != ~tmp___0~4; [L3601] #res.base, #res.offset := 0, 0; [L3592-L3609] ensures true; VAL [#in~size=1048, #NULL.base=0, #NULL.offset=0, #res.base=0, #res.offset=0, #t~malloc134.base=63, #t~malloc134.offset=55, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.meminit_#amountOfFields=60, #Ultimate.meminit_#product=59, #Ultimate.meminit_#ptr.base=66, #Ultimate.meminit_#ptr.offset=67, #Ultimate.meminit_#sizeOfFields=61, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~p~1.base=18446744073709553691, ~p~1.offset=-1, ~ref_cnt~0=0, ~size=1048, ~tmp___0~4=-1, ~tmp~7.base=62, ~tmp~7.offset=58, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4437] RET call ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset := ldv_zalloc(1048); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_#t~ret395.base=0, ldv_initialize_virtio_driver_1_#t~ret395.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4437] ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset := ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset; [L4437] havoc ldv_initialize_virtio_driver_1_#t~ret395.base, ldv_initialize_virtio_driver_1_#t~ret395.offset; [L4438] ~virtio_blk_group0~0.base, ~virtio_blk_group0~0.offset := ldv_initialize_virtio_driver_1_~tmp~26.base, ldv_initialize_virtio_driver_1_~tmp~26.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4541-L4546] assume !(0 != ~ldv_retval_1~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=false, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4482] assume !main_#t~switch402; [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=false, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4516] assume !main_#t~switch402; [L4559] main_#t~switch402 := main_#t~switch402 || 2 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4559] assume main_#t~switch402; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4560-L4585] assume 0 != ~ldv_state_variable_2~0; [L4561] assume -2147483648 <= main_#t~nondet409 && main_#t~nondet409 <= 2147483647; [L4561] main_~tmp___5~2 := main_#t~nondet409; [L4561] havoc main_#t~nondet409; [L4563] main_#t~switch410 := 0 == main_~tmp___5~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4563] assume main_#t~switch410; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4564-L4569] assume 1 == ~ldv_state_variable_2~0; [L4565] call main_#t~mem411 := read~int(main_~#ldvarg3~0.base, main_~#ldvarg3~0.offset, 4); [L4565] virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := ~virtblk_fops_group0~0.base, ~virtblk_fops_group0~0.offset, main_#t~mem411, main_~ldvarg2~0, main_~ldvarg1~0; [L4565] havoc virtblk_ioctl_#res; [L4565] havoc virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset, virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271.base, virtblk_ioctl_#t~mem271.offset, virtblk_ioctl_#t~ret272, virtblk_ioctl_#t~mem273.base, virtblk_ioctl_#t~mem273.offset, virtblk_ioctl_#t~ret274, virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset, virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~21, virtblk_ioctl_~tmp___0~12, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4106-L4153] virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset := virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset; [L4106-L4153] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4106-L4153] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4106-L4153] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4109] havoc virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset; [L4110] havoc virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset; [L4111] havoc virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset; [L4112] call virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset := #Ultimate.alloc(20); [L4113] havoc virtblk_ioctl_~err~1; [L4114] havoc virtblk_ioctl_~tmp~21; [L4115] havoc virtblk_ioctl_~tmp___0~12; [L4116] havoc virtblk_ioctl_~tmp___1~6; [L4117] havoc virtblk_ioctl_~tmp___2~2; [L4120] call virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset := read~$Pointer$(virtblk_ioctl_~bdev.base, 240 + virtblk_ioctl_~bdev.offset, 8); [L4120] virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset := virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset; [L4120] havoc virtblk_ioctl_#t~mem267.base, virtblk_ioctl_#t~mem267.offset; [L4121] call virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset := read~$Pointer$(virtblk_ioctl_~disk~0.base, 1075 + virtblk_ioctl_~disk~0.offset, 8); [L4121] virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset := virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset; [L4121] havoc virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4122-L4138] assume 1447184708 == virtblk_ioctl_~cmd % 4294967296; [L4123] virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset := 0, (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4124] virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset, virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset := virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; [L4124] havoc virtblk_get_id_#res; [L4124] havoc virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset, virtblk_get_id_#t~mem253.base, virtblk_get_id_#t~mem253.offset, virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset, virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset, virtblk_get_id_#t~ret256, virtblk_get_id_#t~ret257, virtblk_get_id_#t~mem258.base, virtblk_get_id_#t~mem258.offset, virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset, virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset, virtblk_get_id_#t~ret261, virtblk_get_id_#t~ret262, virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset, virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset, virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset, virtblk_get_id_#t~ret266, virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, virtblk_get_id_~tmp~20, virtblk_get_id_~tmp___0~11, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1; [L4071-L4105] virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset := virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset; [L4071-L4105] virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset := virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset; [L4073] havoc virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset; [L4074] havoc virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset; [L4075] havoc virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset; [L4076] havoc virtblk_get_id_~tmp~20; [L4077] havoc virtblk_get_id_~tmp___0~11; [L4078] havoc virtblk_get_id_~tmp___1~5; [L4079] havoc virtblk_get_id_~tmp___2~1; [L4080] havoc virtblk_get_id_~tmp___3~1; [L4083] call virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset := read~$Pointer$(virtblk_get_id_~disk.base, 1075 + virtblk_get_id_~disk.offset, 8); [L4083] virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset := virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset; [L4083] havoc virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset; [L4084] call virtblk_get_id_#t~mem253.base, virtblk_get_id_#t~mem253.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4084] call virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset := read~$Pointer$(virtblk_get_id_#t~mem253.base, 1067 + virtblk_get_id_#t~mem253.offset, 8); [L4084] call virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset := bio_map_kern(virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, 20, 208); [L4084] virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset := virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset; [L4084] havoc virtblk_get_id_#t~mem253.base, virtblk_get_id_#t~mem253.offset; [L4084] havoc virtblk_get_id_#t~ret255.base, virtblk_get_id_#t~ret255.offset; [L4084] havoc virtblk_get_id_#t~mem254.base, virtblk_get_id_#t~mem254.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4085] CALL call virtblk_get_id_#t~ret256 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4615-L4623] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4617] havoc ~tmp~31; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4643-L4650] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4648] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3297] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] RET call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret416=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L3119] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~ref_cnt~0=0, ~tmp~31=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4085] RET call virtblk_get_id_#t~ret256 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret256=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4085] assume -9223372036854775808 <= virtblk_get_id_#t~ret256 && virtblk_get_id_#t~ret256 <= 9223372036854775807; [L4085] virtblk_get_id_~tmp___0~11 := virtblk_get_id_#t~ret256; [L4085] havoc virtblk_get_id_#t~ret256; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4086-L4091] assume !(0 != virtblk_get_id_~tmp___0~11); [L4092] call virtblk_get_id_#t~mem258.base, virtblk_get_id_#t~mem258.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4092] call virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset := read~$Pointer$(virtblk_get_id_#t~mem258.base, 1067 + virtblk_get_id_#t~mem258.offset, 8); [L4092] ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset, ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, 208; [L4092] havoc ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L4092] havoc ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset, ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset := ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset := ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4627] havoc ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset; [L4630] ldv_blk_make_request_#in~mask := ldv_blk_make_request_5_~ldv_func_arg3; [L4630] havoc ldv_blk_make_request_#res.base, ldv_blk_make_request_#res.offset; [L4630] havoc ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset, ldv_blk_make_request_#t~ret422, ldv_blk_make_request_~mask, ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset, ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset, ldv_blk_make_request_~tmp___0~17; [L4726-L4753] ldv_blk_make_request_~mask := ldv_blk_make_request_#in~mask; [L4728] havoc ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset; [L4729] havoc ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset; [L4730] havoc ldv_blk_make_request_~tmp___0~17; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4733-L4737] assume 0 == ~ldv_blk_rq~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4738] CALL call ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset := ldv_undef_ptr(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3621] havoc ~tmp~9.base, ~tmp~9.offset; [L3624] ~tmp~9.base, ~tmp~9.offset := #t~nondet136.base, #t~nondet136.offset; [L3624] havoc #t~nondet136.base, #t~nondet136.offset; [L3625] #res.base, #res.offset := ~tmp~9.base, ~tmp~9.offset; [L3619-L3627] ensures true; VAL [#NULL.base=0, #NULL.offset=0, #res.base=18446744073709553690, #res.offset=-62, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~tmp~9.base=18446744073709553690, ~tmp~9.offset=-62, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4738] RET call ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset := ldv_undef_ptr(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#t~ret421.base=18446744073709553690, ldv_blk_make_request_#t~ret421.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4738] ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset := ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset; [L4738] havoc ldv_blk_make_request_#t~ret421.base, ldv_blk_make_request_#t~ret421.offset; [L4739] ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset := ldv_blk_make_request_~tmp~36.base, ldv_blk_make_request_~tmp~36.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4740-L4744] assume 0 != (ldv_blk_make_request_~res~1.base + ldv_blk_make_request_~res~1.offset) % 18446744073709551616; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4745] IS_ERR___0_#in~ptr.base, IS_ERR___0_#in~ptr.offset := ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset; [L4745] havoc IS_ERR___0_#res; [L4745] havoc IS_ERR___0_#t~ret419, IS_ERR___0_~ptr.base, IS_ERR___0_~ptr.offset, IS_ERR___0_~tmp~34; [L4686-L4694] IS_ERR___0_~ptr.base, IS_ERR___0_~ptr.offset := IS_ERR___0_#in~ptr.base, IS_ERR___0_#in~ptr.offset; [L4688] havoc IS_ERR___0_~tmp~34; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4691] CALL call IS_ERR___0_#t~ret419 := ldv__builtin_expect((if !!((IS_ERR___0_~ptr.base + IS_ERR___0_~ptr.offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#in~c=0, #in~exp=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3655-L3662] ~exp := #in~exp; [L3655-L3662] ~c := #in~c; [L3660] #res := ~exp; [L3083] ensures true; VAL [#in~c=0, #in~exp=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~c=0, ~exp=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4691] RET call IS_ERR___0_#t~ret419 := ldv__builtin_expect((if !!((IS_ERR___0_~ptr.base + IS_ERR___0_~ptr.offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#t~ret419=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem258.base=78, virtblk_get_id_#t~mem258.offset=2468, virtblk_get_id_#t~mem259.base=77, virtblk_get_id_#t~mem259.offset=83, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4691] assume -9223372036854775808 <= IS_ERR___0_#t~ret419 && IS_ERR___0_#t~ret419 <= 9223372036854775807; [L4691] IS_ERR___0_~tmp~34 := IS_ERR___0_#t~ret419; [L4691] havoc IS_ERR___0_#t~ret419; [L4692] IS_ERR___0_#res := IS_ERR___0_~tmp~34; [L4745] ldv_blk_make_request_#t~ret422 := IS_ERR___0_#res; [L4745] assume -9223372036854775808 <= ldv_blk_make_request_#t~ret422 && ldv_blk_make_request_#t~ret422 <= 9223372036854775807; [L4745] ldv_blk_make_request_~tmp___0~17 := ldv_blk_make_request_#t~ret422; [L4745] havoc ldv_blk_make_request_#t~ret422; [L4746-L4750] assume !(0 != ldv_blk_make_request_~tmp___0~17); [L4749] ~ldv_blk_rq~0 := 1; [L4751] ldv_blk_make_request_#res.base, ldv_blk_make_request_#res.offset := ldv_blk_make_request_~res~1.base, ldv_blk_make_request_~res~1.offset; [L4630] ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset := ldv_blk_make_request_#res.base, ldv_blk_make_request_#res.offset; [L4630] ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset := ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset; [L4630] havoc ldv_blk_make_request_5_#t~ret417.base, ldv_blk_make_request_5_#t~ret417.offset; [L4631] ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset := ldv_blk_make_request_5_~tmp~32.base, ldv_blk_make_request_5_~tmp~32.offset; [L4092] virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset := ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L4092] virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset := virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset; [L4092] havoc virtblk_get_id_#t~mem259.base, virtblk_get_id_#t~mem259.offset; [L4092] havoc virtblk_get_id_#t~mem258.base, virtblk_get_id_#t~mem258.offset; [L4092] havoc virtblk_get_id_#t~ret260.base, virtblk_get_id_#t~ret260.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4093] CALL call virtblk_get_id_#t~ret261 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4615-L4623] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4617] havoc ~tmp~31; VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=18446744073709553690, ~ptr.offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4643-L4650] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4648] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3297] ensures true; VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=18446744073709553690, ~ptr.offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] RET call #t~ret416 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #t~ret416=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=18446744073709553690, ~ptr.offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L3119] ensures true; VAL [#in~ptr.base=18446744073709553690, #in~ptr.offset=-62, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr.base=18446744073709553690, ~ptr.offset=-62, ~ref_cnt~0=0, ~tmp~31=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4093] RET call virtblk_get_id_#t~ret261 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret261=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4093] assume -9223372036854775808 <= virtblk_get_id_#t~ret261 && virtblk_get_id_#t~ret261 <= 9223372036854775807; [L4093] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret261; [L4093] havoc virtblk_get_id_#t~ret261; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4094-L4100] assume !(0 != virtblk_get_id_~tmp___2~1); [L4101] call write~int(7, virtblk_get_id_~req~1.base, 64 + virtblk_get_id_~req~1.offset, 4); [L4102] call virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4102] call virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset := read~$Pointer$(virtblk_get_id_#t~mem263.base, 1067 + virtblk_get_id_#t~mem263.offset, 8); [L4102] call virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4102] call virtblk_get_id_#t~ret266 := blk_execute_rq(virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset, virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, 0); [L4102] assume -2147483648 <= virtblk_get_id_#t~ret266 && virtblk_get_id_#t~ret266 <= 2147483647; [L4102] virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret266; [L4102] havoc virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset; [L4102] havoc virtblk_get_id_#t~mem265.base, virtblk_get_id_#t~mem265.offset; [L4102] havoc virtblk_get_id_#t~mem264.base, virtblk_get_id_#t~mem264.offset; [L4102] havoc virtblk_get_id_#t~ret266; [L4103] virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0.base=74, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4124] virtblk_ioctl_#t~ret269 := virtblk_get_id_#res; [L4124] assume -2147483648 <= virtblk_ioctl_#t~ret269 && virtblk_ioctl_#t~ret269 <= 2147483647; [L4124] virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret269; [L4124] havoc virtblk_ioctl_#t~ret269; [L4125-L4134] assume 0 == virtblk_ioctl_~err~1; [L4126] copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset, copy_to_user_#in~src.base, copy_to_user_#in~src.offset, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, 20; [L4126] havoc copy_to_user_#res; [L4126] havoc copy_to_user_#t~ret36, copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size, copy_to_user_~tmp~0; [L3214-L3223] copy_to_user_~dst.base, copy_to_user_~dst.offset := copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset; [L3214-L3223] copy_to_user_~src.base, copy_to_user_~src.offset := copy_to_user_#in~src.base, copy_to_user_#in~src.offset; [L3214-L3223] copy_to_user_~size := copy_to_user_#in~size; [L3216] havoc copy_to_user_~tmp~0; [L3219] call might_fault(); [L3220] call copy_to_user_#t~ret36 := _copy_to_user(copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size); [L3220] copy_to_user_~tmp~0 := copy_to_user_#t~ret36; [L3220] havoc copy_to_user_#t~ret36; [L3221] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4126] virtblk_ioctl_#t~ret270 := copy_to_user_#res; [L4126] assume -2147483648 <= virtblk_ioctl_#t~ret270 && virtblk_ioctl_#t~ret270 <= 2147483647; [L4126] virtblk_ioctl_~tmp~21 := virtblk_ioctl_#t~ret270; [L4126] havoc virtblk_ioctl_#t~ret270; [L4127-L4131] assume 0 != virtblk_ioctl_~tmp~21; [L4128] virtblk_ioctl_~err~1 := -14; [L4135] virtblk_ioctl_#res := virtblk_ioctl_~err~1; [L4112] call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset); [L4135] havoc virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4565] main_#t~ret412 := virtblk_ioctl_#res; [L4565] assume -2147483648 <= main_#t~ret412 && main_#t~ret412 <= 2147483647; [L4565] havoc main_#t~mem411; [L4565] havoc main_#t~ret412; [L4566] ~ldv_state_variable_2~0 := 1; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=false, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4482] assume !main_#t~switch402; [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4516] assume main_#t~switch402; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4517-L4557] assume 0 != ~ldv_state_variable_0~0; [L4518] assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647; [L4518] main_~tmp___4~2 := main_#t~nondet406; [L4518] havoc main_#t~nondet406; [L4520] main_#t~switch407 := 0 == main_~tmp___4~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4520] assume main_#t~switch407; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4521-L4527] assume 3 == ~ldv_state_variable_0~0 && 0 == ~ref_cnt~0; [L4422] call unregister_blkdev(~major~0, #t~string394.base, #t~string394.offset); [L4423] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4523] ~ldv_state_variable_0~0 := 2; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4773-L4777] assume !(0 == ~ldv_blk_rq~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src.base=74, copy_to_user_#in~src.offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src.base=74, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr.base=18446744073709553690, IS_ERR___0_#in~ptr.offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr.base=18446744073709553690, IS_ERR___0_~ptr.offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res.base=18446744073709553690, ldv_blk_make_request_#res.offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1.base=77, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709553690, ldv_blk_make_request_5_#res.offset=-62, ldv_blk_make_request_5_~ldv_func_arg1.base=77, ldv_blk_make_request_5_~ldv_func_arg1.offset=83, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32.base=18446744073709553690, ldv_blk_make_request_5_~tmp~32.offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1.base=18446744073709553690, ldv_blk_make_request_~res~1.offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36.base=18446744073709553690, ldv_blk_make_request_~tmp~36.offset=-62, ldv_initialize_block_device_operations_2_~tmp~27.base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27.offset=0, ldv_initialize_virtio_driver_1_~tmp~26.base=0, ldv_initialize_virtio_driver_1_~tmp~26.offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0.base=18446744073709553690, main_~#ldvarg3~0.offset=0, main_~ldvarg0~0.base=2, main_~ldvarg0~0.offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15.base=2, main_~tmp___0~15.offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk.base=70, virtblk_get_id_#in~disk.offset=4159, virtblk_get_id_#in~id_str.base=74, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=70, virtblk_get_id_~disk.offset=4159, virtblk_get_id_~id_str.base=74, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709553690, virtblk_get_id_~req~1.offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=76, virtblk_get_id_~vblk~2.offset=-4429, virtblk_ioctl_#in~bdev.base=-142482651225332576681985, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev.base=-142482651225332576681985, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0.base=70, virtblk_ioctl_~disk~0.offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=9223372036854775807, virtblk_ioctl_~vblk~3.base=76, virtblk_ioctl_~vblk~3.offset=-4429, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L4776] CALL call ldv_error(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [L3643] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=26, #t~string108.offset=0, #t~string292.base=25, #t~string292.offset=0, #t~string295.base=23, #t~string295.offset=0, #t~string309.base=66, #t~string309.offset=0, #t~string312.base=21, #t~string312.offset=0, #t~string315.base=19, #t~string315.offset=0, #t~string390.base=38, #t~string390.offset=0, #t~string391.base=30, #t~string391.offset=0, #t~string394.base=29, #t~string394.offset=0, ~#__this_module~0.base=44, ~#__this_module~0.offset=39, ~#features~0.base=45, ~#features~0.offset=0, ~#id_table~0.base=46, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=17, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=13, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0.base=-142482651225332576681985, ~virtblk_fops_group0~0.offset=0, ~virtio_blk_group0~0.base=0, ~virtio_blk_group0~0.offset=0] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3323] FCALL call #t~string108 := #Ultimate.alloc(28); [L4239] FCALL call #t~string292 := #Ultimate.alloc(22); [L4243] FCALL call #t~string295 := #Ultimate.alloc(9); [L4277] FCALL call #t~string309 := #Ultimate.alloc(5); [L4277] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4277] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(0, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4280] FCALL call #t~string312 := #Ultimate.alloc(7); [L4280] FCALL call write~init~int(118, { base: #t~string312!base, offset: #t~string312!offset }, 1); [L4280] FCALL call write~init~int(100, { base: #t~string312!base, offset: 1 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(37, { base: #t~string312!base, offset: 2 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(99, { base: #t~string312!base, offset: 3 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(37, { base: #t~string312!base, offset: 4 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(99, { base: #t~string312!base, offset: 5 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(0, { base: #t~string312!base, offset: 6 + #t~string312!offset }, 1); [L4285] FCALL call #t~string315 := #Ultimate.alloc(9); [L4400] FCALL call #t~string390 := #Ultimate.alloc(11); [L4407] FCALL call #t~string391 := #Ultimate.alloc(8); [L4422] FCALL call #t~string394 := #Ultimate.alloc(8); [L3672] ~LDV_IN_INTERRUPT~0 := 1; [L3674] ~ldv_state_variable_2~0 := 0; [L3675] ~ref_cnt~0 := 0; [L3676] ~ldv_state_variable_1~0 := 0; [L3678] ~ldv_state_variable_0~0 := 0; [L3823] ~major~0 := 0; [L3824] ~index~0 := 0; [L4396-L4399] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4396-L4399] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4428] ~ldv_retval_0~0 := 0; [L4429] ~ldv_retval_1~0 := 0; [L4695] ~ldv_blk_rq~0 := 0; [L3673] ~virtblk_fops_group0~0 := { base: 0, offset: 0 }; [L3677] ~virtio_blk_group0~0 := { base: 0, offset: 0 }; [L4177-L4178] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4394-L4395] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4394-L4395] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4400-L4401] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4400-L4401] FCALL call write~init~$Pointer$(#t~string390, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4400-L4401] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4427] ~__mod_virtio_device_table~0!device := 0; [L4427] ~__mod_virtio_device_table~0!vendor := 0; [?] havoc main_#res; [?] havoc main_#t~nondet397, main_#t~ret398, main_#t~nondet399, main_#t~memset~res400, main_#t~nondet401, main_#t~switch402, main_#t~nondet403, main_#t~switch404, main_#t~ret405, main_#t~nondet406, main_#t~switch407, main_#t~ret408, main_#t~nondet409, main_#t~switch410, main_#t~mem411, main_#t~ret412, main_#t~ret413, main_~ldvarg1~0, main_~tmp~28, main_~#ldvarg3~0, main_~ldvarg0~0, main_~tmp___0~15, main_~ldvarg2~0, main_~tmp___1~8, main_~tmp___2~4, main_~tmp___3~3, main_~tmp___4~2, main_~tmp___5~2; [L4454] havoc main_~ldvarg1~0; [L4455] havoc main_~tmp~28; [L4456] FCALL call main_~#ldvarg3~0 := #Ultimate.alloc(4); [L4457] havoc main_~ldvarg0~0; [L4458] havoc main_~tmp___0~15; [L4459] havoc main_~ldvarg2~0; [L4460] havoc main_~tmp___1~8; [L4461] havoc main_~tmp___2~4; [L4462] havoc main_~tmp___3~3; [L4463] havoc main_~tmp___4~2; [L4464] havoc main_~tmp___5~2; [L4467] main_~tmp~28 := main_#t~nondet397; [L4467] havoc main_#t~nondet397; [L4468] main_~ldvarg1~0 := main_~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4469] CALL call main_#t~ret398 := ldv_zalloc(16); VAL [#in~size=16, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND FALSE !(0 != ~tmp___0~4) [L3603] FCALL call #t~malloc134 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [L3603] #Ultimate.meminit_#ptr, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr!base); [L3603] ~tmp~7 := #t~malloc134; [L3604] ~p~1 := ~tmp~7; [L3605] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L3606] #res := ~p~1; [L4469] RET call main_#t~ret398 := ldv_zalloc(16); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, main_#t~ret398!base=2, main_#t~ret398!offset=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4469] main_~tmp___0~15 := main_#t~ret398; [L4469] havoc main_#t~ret398; [L4470] main_~ldvarg0~0 := main_~tmp___0~15; [L4471] main_~tmp___1~8 := main_#t~nondet399; [L4471] havoc main_#t~nondet399; [L4472] main_~ldvarg2~0 := main_~tmp___1~8; [L4473] FCALL call ldv_initialize(); [L4474] #Ultimate.C_memset_#ptr, #Ultimate.C_memset_#value, #Ultimate.C_memset_#amount := main_~#ldvarg3~0, 0, 4; [L4474] havoc #Ultimate.C_memset_#res; [L4474] havoc #Ultimate.C_memset_#t~loopctr424; [?] #Ultimate.C_memset_#t~loopctr424 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=0, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount [?] #memory_int[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := #Ultimate.C_memset_#value; [?] #memory_$Pointer$[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := { base: 0, offset: #Ultimate.C_memset_#value % 256 }; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=1, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount [?] #memory_int[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := #Ultimate.C_memset_#value; [?] #memory_$Pointer$[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := { base: 0, offset: #Ultimate.C_memset_#value % 256 }; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=2, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount [?] #memory_int[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := #Ultimate.C_memset_#value; [?] #memory_$Pointer$[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := { base: 0, offset: #Ultimate.C_memset_#value % 256 }; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=3, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount [?] #memory_int[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := #Ultimate.C_memset_#value; [?] #memory_$Pointer$[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := { base: 0, offset: #Ultimate.C_memset_#value % 256 }; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND FALSE !(#Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount) [?] assume #Ultimate.C_memset_#res == #Ultimate.C_memset_#ptr; [L4474] main_#t~memset~res400 := #Ultimate.C_memset_#res; [L4474] havoc main_#t~memset~res400; [L4475] ~ldv_state_variable_1~0 := 0; [L4476] ~ref_cnt~0 := 0; [L4477] ~ldv_state_variable_0~0 := 1; [L4478] ~ldv_state_variable_2~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=false, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(main_#t~switch402) [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE main_#t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4517] COND TRUE 0 != ~ldv_state_variable_0~0 [L4518] assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647; [L4518] main_~tmp___4~2 := main_#t~nondet406; [L4518] havoc main_#t~nondet406; [L4520] main_#t~switch407 := 0 == main_~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=false, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND FALSE !(main_#t~switch407) [L4529] main_#t~switch407 := main_#t~switch407 || 1 == main_~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND TRUE main_#t~switch407 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4530] COND TRUE 1 == ~ldv_state_variable_0~0 [L4531] havoc init_#res; [L4531] havoc init_#t~ret392, init_#t~ret393, init_~tmp~25; [L4404] havoc init_~tmp~25; [L4407] FCALL call init_#t~ret392 := register_blkdev(0, #t~string391); [L4407] assume -2147483648 <= init_#t~ret392 && init_#t~ret392 <= 2147483647; [L4407] ~major~0 := init_#t~ret392; [L4407] havoc init_#t~ret392; [L4408] COND FALSE !(~major~0 < 0) [L4413] FCALL call init_#t~ret393 := register_virtio_driver(~#virtio_blk~0); [L4413] assume -2147483648 <= init_#t~ret393 && init_#t~ret393 <= 2147483647; [L4413] init_~tmp~25 := init_#t~ret393; [L4413] havoc init_#t~ret393; [L4414] init_#res := init_~tmp~25; [L4531] main_#t~ret408 := init_#res; [L4531] assume -2147483648 <= main_#t~ret408 && main_#t~ret408 <= 2147483647; [L4531] ~ldv_retval_1~0 := main_#t~ret408; [L4531] havoc main_#t~ret408; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4532] COND TRUE 0 == ~ldv_retval_1~0 [L4533] ~ldv_state_variable_0~0 := 3; [L4534] ~ldv_state_variable_2~0 := 1; [L4535] havoc ldv_initialize_block_device_operations_2_#t~ret396, ldv_initialize_block_device_operations_2_~tmp~27; [L4444] havoc ldv_initialize_block_device_operations_2_~tmp~27; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4447] CALL call ldv_initialize_block_device_operations_2_#t~ret396 := ldv_zalloc(464); VAL [#in~size=464, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND FALSE !(0 != ~tmp___0~4) [L3603] FCALL call #t~malloc134 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [L3603] #Ultimate.meminit_#ptr, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr!base); [L3603] ~tmp~7 := #t~malloc134; [L3604] ~p~1 := ~tmp~7; [L3605] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L3606] #res := ~p~1; [L4447] RET call ldv_initialize_block_device_operations_2_#t~ret396 := ldv_zalloc(464); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_#t~ret396!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_#t~ret396!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4447] ldv_initialize_block_device_operations_2_~tmp~27 := ldv_initialize_block_device_operations_2_#t~ret396; [L4447] havoc ldv_initialize_block_device_operations_2_#t~ret396; [L4448] ~virtblk_fops_group0~0 := ldv_initialize_block_device_operations_2_~tmp~27; [L4536] ~ldv_state_variable_1~0 := 1; [L4537] havoc ldv_initialize_virtio_driver_1_#t~ret395, ldv_initialize_virtio_driver_1_~tmp~26; [L4434] havoc ldv_initialize_virtio_driver_1_~tmp~26; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4437] CALL call ldv_initialize_virtio_driver_1_#t~ret395 := ldv_zalloc(1048); VAL [#in~size=1048, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND TRUE 0 != ~tmp___0~4 [L3601] #res := { base: 0, offset: 0 }; [L4437] RET call ldv_initialize_virtio_driver_1_#t~ret395 := ldv_zalloc(1048); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_#t~ret395!base=0, ldv_initialize_virtio_driver_1_#t~ret395!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4437] ldv_initialize_virtio_driver_1_~tmp~26 := ldv_initialize_virtio_driver_1_#t~ret395; [L4437] havoc ldv_initialize_virtio_driver_1_#t~ret395; [L4438] ~virtio_blk_group0~0 := ldv_initialize_virtio_driver_1_~tmp~26; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4541] COND FALSE !(0 != ~ldv_retval_1~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=false, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(main_#t~switch402) [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=false, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(main_#t~switch402) [L4559] main_#t~switch402 := main_#t~switch402 || 2 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE main_#t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4560] COND TRUE 0 != ~ldv_state_variable_2~0 [L4561] assume -2147483648 <= main_#t~nondet409 && main_#t~nondet409 <= 2147483647; [L4561] main_~tmp___5~2 := main_#t~nondet409; [L4561] havoc main_#t~nondet409; [L4563] main_#t~switch410 := 0 == main_~tmp___5~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4562-L4581] COND TRUE main_#t~switch410 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4564] COND TRUE 1 == ~ldv_state_variable_2~0 [L4565] FCALL call main_#t~mem411 := read~int(main_~#ldvarg3~0, 4); [L4565] virtblk_ioctl_#in~bdev, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := ~virtblk_fops_group0~0, main_#t~mem411, main_~ldvarg2~0, main_~ldvarg1~0; [L4565] havoc virtblk_ioctl_#res; [L4565] havoc virtblk_ioctl_#t~mem267, virtblk_ioctl_#t~mem268, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271, virtblk_ioctl_#t~ret272, virtblk_ioctl_#t~mem273, virtblk_ioctl_#t~ret274, virtblk_ioctl_~bdev, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0, virtblk_ioctl_~vblk~3, virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~21, virtblk_ioctl_~tmp___0~12, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4106-L4153] virtblk_ioctl_~bdev := virtblk_ioctl_#in~bdev; [L4106-L4153] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4106-L4153] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4106-L4153] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4109] havoc virtblk_ioctl_~disk~0; [L4110] havoc virtblk_ioctl_~vblk~3; [L4111] havoc virtblk_ioctl_~usr_data~0; [L4112] FCALL call virtblk_ioctl_~#id_str~0 := #Ultimate.alloc(20); [L4113] havoc virtblk_ioctl_~err~1; [L4114] havoc virtblk_ioctl_~tmp~21; [L4115] havoc virtblk_ioctl_~tmp___0~12; [L4116] havoc virtblk_ioctl_~tmp___1~6; [L4117] havoc virtblk_ioctl_~tmp___2~2; [L4120] FCALL call virtblk_ioctl_#t~mem267 := read~$Pointer$({ base: virtblk_ioctl_~bdev!base, offset: 240 + virtblk_ioctl_~bdev!offset }, 8); [L4120] virtblk_ioctl_~disk~0 := virtblk_ioctl_#t~mem267; [L4120] havoc virtblk_ioctl_#t~mem267; [L4121] FCALL call virtblk_ioctl_#t~mem268 := read~$Pointer$({ base: virtblk_ioctl_~disk~0!base, offset: 1075 + virtblk_ioctl_~disk~0!offset }, 8); [L4121] virtblk_ioctl_~vblk~3 := virtblk_ioctl_#t~mem268; [L4121] havoc virtblk_ioctl_#t~mem268; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4122] COND TRUE 1447184708 == virtblk_ioctl_~cmd % 4294967296 [L4123] virtblk_ioctl_~usr_data~0 := { base: 0, offset: (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L4124] virtblk_get_id_#in~disk, virtblk_get_id_#in~id_str := virtblk_ioctl_~disk~0, virtblk_ioctl_~#id_str~0; [L4124] havoc virtblk_get_id_#res; [L4124] havoc virtblk_get_id_#t~mem252, virtblk_get_id_#t~mem253, virtblk_get_id_#t~mem254, virtblk_get_id_#t~ret255, virtblk_get_id_#t~ret256, virtblk_get_id_#t~ret257, virtblk_get_id_#t~mem258, virtblk_get_id_#t~mem259, virtblk_get_id_#t~ret260, virtblk_get_id_#t~ret261, virtblk_get_id_#t~ret262, virtblk_get_id_#t~mem263, virtblk_get_id_#t~mem264, virtblk_get_id_#t~mem265, virtblk_get_id_#t~ret266, virtblk_get_id_~disk, virtblk_get_id_~id_str, virtblk_get_id_~vblk~2, virtblk_get_id_~req~1, virtblk_get_id_~bio~0, virtblk_get_id_~tmp~20, virtblk_get_id_~tmp___0~11, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1; [L4071-L4105] virtblk_get_id_~disk := virtblk_get_id_#in~disk; [L4071-L4105] virtblk_get_id_~id_str := virtblk_get_id_#in~id_str; [L4073] havoc virtblk_get_id_~vblk~2; [L4074] havoc virtblk_get_id_~req~1; [L4075] havoc virtblk_get_id_~bio~0; [L4076] havoc virtblk_get_id_~tmp~20; [L4077] havoc virtblk_get_id_~tmp___0~11; [L4078] havoc virtblk_get_id_~tmp___1~5; [L4079] havoc virtblk_get_id_~tmp___2~1; [L4080] havoc virtblk_get_id_~tmp___3~1; [L4083] FCALL call virtblk_get_id_#t~mem252 := read~$Pointer$({ base: virtblk_get_id_~disk!base, offset: 1075 + virtblk_get_id_~disk!offset }, 8); [L4083] virtblk_get_id_~vblk~2 := virtblk_get_id_#t~mem252; [L4083] havoc virtblk_get_id_#t~mem252; [L4084] FCALL call virtblk_get_id_#t~mem253 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4084] FCALL call virtblk_get_id_#t~mem254 := read~$Pointer$({ base: virtblk_get_id_#t~mem253!base, offset: 1067 + virtblk_get_id_#t~mem253!offset }, 8); [L4084] FCALL call virtblk_get_id_#t~ret255 := bio_map_kern(virtblk_get_id_#t~mem254, virtblk_get_id_~id_str, 20, 208); [L4084] virtblk_get_id_~bio~0 := virtblk_get_id_#t~ret255; [L4084] havoc virtblk_get_id_#t~mem253; [L4084] havoc virtblk_get_id_#t~ret255; [L4084] havoc virtblk_get_id_#t~mem254; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4085] CALL call virtblk_get_id_#t~ret256 := IS_ERR(virtblk_get_id_~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4615-L4623] ~ptr := #in~ptr; [L4617] havoc ~tmp~31; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4643-L4650] ~ptr := #in~ptr; [L4648] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4620] RET call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret416=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L4085] RET call virtblk_get_id_#t~ret256 := IS_ERR(virtblk_get_id_~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret256=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4085] assume -9223372036854775808 <= virtblk_get_id_#t~ret256 && virtblk_get_id_#t~ret256 <= 9223372036854775807; [L4085] virtblk_get_id_~tmp___0~11 := virtblk_get_id_#t~ret256; [L4085] havoc virtblk_get_id_#t~ret256; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4086] COND FALSE !(0 != virtblk_get_id_~tmp___0~11) [L4092] FCALL call virtblk_get_id_#t~mem258 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4092] FCALL call virtblk_get_id_#t~mem259 := read~$Pointer$({ base: virtblk_get_id_#t~mem258!base, offset: 1067 + virtblk_get_id_#t~mem258!offset }, 8); [L4092] ldv_blk_make_request_5_#in~ldv_func_arg1, ldv_blk_make_request_5_#in~ldv_func_arg2, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem259, virtblk_get_id_~bio~0, 208; [L4092] havoc ldv_blk_make_request_5_#res; [L4092] havoc ldv_blk_make_request_5_#t~ret417, ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~tmp~32; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg1 := ldv_blk_make_request_5_#in~ldv_func_arg1; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg2 := ldv_blk_make_request_5_#in~ldv_func_arg2; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4627] havoc ldv_blk_make_request_5_~tmp~32; [L4630] ldv_blk_make_request_#in~mask := ldv_blk_make_request_5_~ldv_func_arg3; [L4630] havoc ldv_blk_make_request_#res; [L4630] havoc ldv_blk_make_request_#t~ret421, ldv_blk_make_request_#t~ret422, ldv_blk_make_request_~mask, ldv_blk_make_request_~res~1, ldv_blk_make_request_~tmp~36, ldv_blk_make_request_~tmp___0~17; [L4726-L4753] ldv_blk_make_request_~mask := ldv_blk_make_request_#in~mask; [L4728] havoc ldv_blk_make_request_~res~1; [L4729] havoc ldv_blk_make_request_~tmp~36; [L4730] havoc ldv_blk_make_request_~tmp___0~17; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4733] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4738] CALL call ldv_blk_make_request_#t~ret421 := ldv_undef_ptr(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3621] havoc ~tmp~9; [L3624] ~tmp~9 := #t~nondet136; [L3624] havoc #t~nondet136; [L3625] #res := ~tmp~9; [L4738] RET call ldv_blk_make_request_#t~ret421 := ldv_undef_ptr(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#t~ret421!base=18446744073709553690, ldv_blk_make_request_#t~ret421!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4738] ldv_blk_make_request_~tmp~36 := ldv_blk_make_request_#t~ret421; [L4738] havoc ldv_blk_make_request_#t~ret421; [L4739] ldv_blk_make_request_~res~1 := ldv_blk_make_request_~tmp~36; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4740] COND TRUE 0 != (ldv_blk_make_request_~res~1!base + ldv_blk_make_request_~res~1!offset) % 18446744073709551616 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4745] IS_ERR___0_#in~ptr := ldv_blk_make_request_~res~1; [L4745] havoc IS_ERR___0_#res; [L4745] havoc IS_ERR___0_#t~ret419, IS_ERR___0_~ptr, IS_ERR___0_~tmp~34; [L4686-L4694] IS_ERR___0_~ptr := IS_ERR___0_#in~ptr; [L4688] havoc IS_ERR___0_~tmp~34; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4691] CALL call IS_ERR___0_#t~ret419 := ldv__builtin_expect((if !!((IS_ERR___0_~ptr!base + IS_ERR___0_~ptr!offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#in~c=0, #in~exp=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3655-L3662] ~exp := #in~exp; [L3655-L3662] ~c := #in~c; [L3660] #res := ~exp; [L4691] RET call IS_ERR___0_#t~ret419 := ldv__builtin_expect((if !!((IS_ERR___0_~ptr!base + IS_ERR___0_~ptr!offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#t~ret419=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4691] assume -9223372036854775808 <= IS_ERR___0_#t~ret419 && IS_ERR___0_#t~ret419 <= 9223372036854775807; [L4691] IS_ERR___0_~tmp~34 := IS_ERR___0_#t~ret419; [L4691] havoc IS_ERR___0_#t~ret419; [L4692] IS_ERR___0_#res := IS_ERR___0_~tmp~34; [L4745] ldv_blk_make_request_#t~ret422 := IS_ERR___0_#res; [L4745] assume -9223372036854775808 <= ldv_blk_make_request_#t~ret422 && ldv_blk_make_request_#t~ret422 <= 9223372036854775807; [L4745] ldv_blk_make_request_~tmp___0~17 := ldv_blk_make_request_#t~ret422; [L4745] havoc ldv_blk_make_request_#t~ret422; [L4746-L4750] COND FALSE !(0 != ldv_blk_make_request_~tmp___0~17) [L4749] ~ldv_blk_rq~0 := 1; [L4751] ldv_blk_make_request_#res := ldv_blk_make_request_~res~1; [L4630] ldv_blk_make_request_5_#t~ret417 := ldv_blk_make_request_#res; [L4630] ldv_blk_make_request_5_~tmp~32 := ldv_blk_make_request_5_#t~ret417; [L4630] havoc ldv_blk_make_request_5_#t~ret417; [L4631] ldv_blk_make_request_5_#res := ldv_blk_make_request_5_~tmp~32; [L4092] virtblk_get_id_#t~ret260 := ldv_blk_make_request_5_#res; [L4092] virtblk_get_id_~req~1 := virtblk_get_id_#t~ret260; [L4092] havoc virtblk_get_id_#t~mem259; [L4092] havoc virtblk_get_id_#t~mem258; [L4092] havoc virtblk_get_id_#t~ret260; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4093] CALL call virtblk_get_id_#t~ret261 := IS_ERR(virtblk_get_id_~req~1); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4615-L4623] ~ptr := #in~ptr; [L4617] havoc ~tmp~31; VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=18446744073709553690, ~ptr!offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4643-L4650] ~ptr := #in~ptr; [L4648] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4620] RET call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~ret416=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=18446744073709553690, ~ptr!offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L4093] RET call virtblk_get_id_#t~ret261 := IS_ERR(virtblk_get_id_~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret261=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4093] assume -9223372036854775808 <= virtblk_get_id_#t~ret261 && virtblk_get_id_#t~ret261 <= 9223372036854775807; [L4093] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret261; [L4093] havoc virtblk_get_id_#t~ret261; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4094] COND FALSE !(0 != virtblk_get_id_~tmp___2~1) [L4101] FCALL call write~int(7, { base: virtblk_get_id_~req~1!base, offset: 64 + virtblk_get_id_~req~1!offset }, 4); [L4102] FCALL call virtblk_get_id_#t~mem263 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4102] FCALL call virtblk_get_id_#t~mem264 := read~$Pointer$({ base: virtblk_get_id_#t~mem263!base, offset: 1067 + virtblk_get_id_#t~mem263!offset }, 8); [L4102] FCALL call virtblk_get_id_#t~mem265 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4102] FCALL call virtblk_get_id_#t~ret266 := blk_execute_rq(virtblk_get_id_#t~mem264, virtblk_get_id_#t~mem265, virtblk_get_id_~req~1, 0); [L4102] assume -2147483648 <= virtblk_get_id_#t~ret266 && virtblk_get_id_#t~ret266 <= 2147483647; [L4102] virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret266; [L4102] havoc virtblk_get_id_#t~mem263; [L4102] havoc virtblk_get_id_#t~mem265; [L4102] havoc virtblk_get_id_#t~mem264; [L4102] havoc virtblk_get_id_#t~ret266; [L4103] virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4124] virtblk_ioctl_#t~ret269 := virtblk_get_id_#res; [L4124] assume -2147483648 <= virtblk_ioctl_#t~ret269 && virtblk_ioctl_#t~ret269 <= 2147483647; [L4124] virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret269; [L4124] havoc virtblk_ioctl_#t~ret269; [L4125] COND TRUE 0 == virtblk_ioctl_~err~1 [L4126] copy_to_user_#in~dst, copy_to_user_#in~src, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, 20; [L4126] havoc copy_to_user_#res; [L4126] havoc copy_to_user_#t~ret36, copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size, copy_to_user_~tmp~0; [L3214-L3223] copy_to_user_~dst := copy_to_user_#in~dst; [L3214-L3223] copy_to_user_~src := copy_to_user_#in~src; [L3214-L3223] copy_to_user_~size := copy_to_user_#in~size; [L3216] havoc copy_to_user_~tmp~0; [L3219] FCALL call might_fault(); [L3220] FCALL call copy_to_user_#t~ret36 := _copy_to_user(copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size); [L3220] copy_to_user_~tmp~0 := copy_to_user_#t~ret36; [L3220] havoc copy_to_user_#t~ret36; [L3221] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4126] virtblk_ioctl_#t~ret270 := copy_to_user_#res; [L4126] assume -2147483648 <= virtblk_ioctl_#t~ret270 && virtblk_ioctl_#t~ret270 <= 2147483647; [L4126] virtblk_ioctl_~tmp~21 := virtblk_ioctl_#t~ret270; [L4126] havoc virtblk_ioctl_#t~ret270; [L4127] COND TRUE 0 != virtblk_ioctl_~tmp~21 [L4128] virtblk_ioctl_~err~1 := -14; [L4135] virtblk_ioctl_#res := virtblk_ioctl_~err~1; [L4112] FCALL call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0); [L4135] havoc virtblk_ioctl_~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4565] main_#t~ret412 := virtblk_ioctl_#res; [L4565] assume -2147483648 <= main_#t~ret412 && main_#t~ret412 <= 2147483647; [L4565] havoc main_#t~mem411; [L4565] havoc main_#t~ret412; [L4566] ~ldv_state_variable_2~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=false, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(main_#t~switch402) [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE main_#t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4517] COND TRUE 0 != ~ldv_state_variable_0~0 [L4518] assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647; [L4518] main_~tmp___4~2 := main_#t~nondet406; [L4518] havoc main_#t~nondet406; [L4520] main_#t~switch407 := 0 == main_~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND TRUE main_#t~switch407 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4521] COND TRUE 3 == ~ldv_state_variable_0~0 && 0 == ~ref_cnt~0 [L4422] FCALL call unregister_blkdev(~major~0, #t~string394); [L4423] FCALL call unregister_virtio_driver(~#virtio_blk~0); [L4523] ~ldv_state_variable_0~0 := 2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4773] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4776] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3643] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3323] FCALL call #t~string108 := #Ultimate.alloc(28); [L4239] FCALL call #t~string292 := #Ultimate.alloc(22); [L4243] FCALL call #t~string295 := #Ultimate.alloc(9); [L4277] FCALL call #t~string309 := #Ultimate.alloc(5); [L4277] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4277] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(0, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4280] FCALL call #t~string312 := #Ultimate.alloc(7); [L4280] FCALL call write~init~int(118, { base: #t~string312!base, offset: #t~string312!offset }, 1); [L4280] FCALL call write~init~int(100, { base: #t~string312!base, offset: 1 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(37, { base: #t~string312!base, offset: 2 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(99, { base: #t~string312!base, offset: 3 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(37, { base: #t~string312!base, offset: 4 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(99, { base: #t~string312!base, offset: 5 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(0, { base: #t~string312!base, offset: 6 + #t~string312!offset }, 1); [L4285] FCALL call #t~string315 := #Ultimate.alloc(9); [L4400] FCALL call #t~string390 := #Ultimate.alloc(11); [L4407] FCALL call #t~string391 := #Ultimate.alloc(8); [L4422] FCALL call #t~string394 := #Ultimate.alloc(8); [L3672] ~LDV_IN_INTERRUPT~0 := 1; [L3674] ~ldv_state_variable_2~0 := 0; [L3675] ~ref_cnt~0 := 0; [L3676] ~ldv_state_variable_1~0 := 0; [L3678] ~ldv_state_variable_0~0 := 0; [L3823] ~major~0 := 0; [L3824] ~index~0 := 0; [L4396-L4399] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4396-L4399] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4428] ~ldv_retval_0~0 := 0; [L4429] ~ldv_retval_1~0 := 0; [L4695] ~ldv_blk_rq~0 := 0; [L3673] ~virtblk_fops_group0~0 := { base: 0, offset: 0 }; [L3677] ~virtio_blk_group0~0 := { base: 0, offset: 0 }; [L4177-L4178] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4394-L4395] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4394-L4395] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4400-L4401] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4400-L4401] FCALL call write~init~$Pointer$(#t~string390, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4400-L4401] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4427] ~__mod_virtio_device_table~0!device := 0; [L4427] ~__mod_virtio_device_table~0!vendor := 0; [?] havoc main_#res; [?] havoc main_#t~nondet397, main_#t~ret398, main_#t~nondet399, main_#t~memset~res400, main_#t~nondet401, main_#t~switch402, main_#t~nondet403, main_#t~switch404, main_#t~ret405, main_#t~nondet406, main_#t~switch407, main_#t~ret408, main_#t~nondet409, main_#t~switch410, main_#t~mem411, main_#t~ret412, main_#t~ret413, main_~ldvarg1~0, main_~tmp~28, main_~#ldvarg3~0, main_~ldvarg0~0, main_~tmp___0~15, main_~ldvarg2~0, main_~tmp___1~8, main_~tmp___2~4, main_~tmp___3~3, main_~tmp___4~2, main_~tmp___5~2; [L4454] havoc main_~ldvarg1~0; [L4455] havoc main_~tmp~28; [L4456] FCALL call main_~#ldvarg3~0 := #Ultimate.alloc(4); [L4457] havoc main_~ldvarg0~0; [L4458] havoc main_~tmp___0~15; [L4459] havoc main_~ldvarg2~0; [L4460] havoc main_~tmp___1~8; [L4461] havoc main_~tmp___2~4; [L4462] havoc main_~tmp___3~3; [L4463] havoc main_~tmp___4~2; [L4464] havoc main_~tmp___5~2; [L4467] main_~tmp~28 := main_#t~nondet397; [L4467] havoc main_#t~nondet397; [L4468] main_~ldvarg1~0 := main_~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4469] CALL call main_#t~ret398 := ldv_zalloc(16); VAL [#in~size=16, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND FALSE !(0 != ~tmp___0~4) [L3603] FCALL call #t~malloc134 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [L3603] #Ultimate.meminit_#ptr, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr!base); [L3603] ~tmp~7 := #t~malloc134; [L3604] ~p~1 := ~tmp~7; [L3605] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L3606] #res := ~p~1; [L4469] RET call main_#t~ret398 := ldv_zalloc(16); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, main_#t~ret398!base=2, main_#t~ret398!offset=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4469] main_~tmp___0~15 := main_#t~ret398; [L4469] havoc main_#t~ret398; [L4470] main_~ldvarg0~0 := main_~tmp___0~15; [L4471] main_~tmp___1~8 := main_#t~nondet399; [L4471] havoc main_#t~nondet399; [L4472] main_~ldvarg2~0 := main_~tmp___1~8; [L4473] FCALL call ldv_initialize(); [L4474] #Ultimate.C_memset_#ptr, #Ultimate.C_memset_#value, #Ultimate.C_memset_#amount := main_~#ldvarg3~0, 0, 4; [L4474] havoc #Ultimate.C_memset_#res; [L4474] havoc #Ultimate.C_memset_#t~loopctr424; [?] #Ultimate.C_memset_#t~loopctr424 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=0, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount [?] #memory_int[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := #Ultimate.C_memset_#value; [?] #memory_$Pointer$[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := { base: 0, offset: #Ultimate.C_memset_#value % 256 }; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=1, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount [?] #memory_int[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := #Ultimate.C_memset_#value; [?] #memory_$Pointer$[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := { base: 0, offset: #Ultimate.C_memset_#value % 256 }; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=2, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount [?] #memory_int[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := #Ultimate.C_memset_#value; [?] #memory_$Pointer$[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := { base: 0, offset: #Ultimate.C_memset_#value % 256 }; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=3, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount [?] #memory_int[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := #Ultimate.C_memset_#value; [?] #memory_$Pointer$[{ base: #Ultimate.C_memset_#ptr!base, offset: #Ultimate.C_memset_#ptr!offset + #Ultimate.C_memset_#t~loopctr424 }] := { base: 0, offset: #Ultimate.C_memset_#value % 256 }; [?] #Ultimate.C_memset_#t~loopctr424 := 1 + #Ultimate.C_memset_#t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND FALSE !(#Ultimate.C_memset_#t~loopctr424 < #Ultimate.C_memset_#amount) [?] assume #Ultimate.C_memset_#res == #Ultimate.C_memset_#ptr; [L4474] main_#t~memset~res400 := #Ultimate.C_memset_#res; [L4474] havoc main_#t~memset~res400; [L4475] ~ldv_state_variable_1~0 := 0; [L4476] ~ref_cnt~0 := 0; [L4477] ~ldv_state_variable_0~0 := 1; [L4478] ~ldv_state_variable_2~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=false, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(main_#t~switch402) [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE main_#t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4517] COND TRUE 0 != ~ldv_state_variable_0~0 [L4518] assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647; [L4518] main_~tmp___4~2 := main_#t~nondet406; [L4518] havoc main_#t~nondet406; [L4520] main_#t~switch407 := 0 == main_~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=false, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND FALSE !(main_#t~switch407) [L4529] main_#t~switch407 := main_#t~switch407 || 1 == main_~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND TRUE main_#t~switch407 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4530] COND TRUE 1 == ~ldv_state_variable_0~0 [L4531] havoc init_#res; [L4531] havoc init_#t~ret392, init_#t~ret393, init_~tmp~25; [L4404] havoc init_~tmp~25; [L4407] FCALL call init_#t~ret392 := register_blkdev(0, #t~string391); [L4407] assume -2147483648 <= init_#t~ret392 && init_#t~ret392 <= 2147483647; [L4407] ~major~0 := init_#t~ret392; [L4407] havoc init_#t~ret392; [L4408] COND FALSE !(~major~0 < 0) [L4413] FCALL call init_#t~ret393 := register_virtio_driver(~#virtio_blk~0); [L4413] assume -2147483648 <= init_#t~ret393 && init_#t~ret393 <= 2147483647; [L4413] init_~tmp~25 := init_#t~ret393; [L4413] havoc init_#t~ret393; [L4414] init_#res := init_~tmp~25; [L4531] main_#t~ret408 := init_#res; [L4531] assume -2147483648 <= main_#t~ret408 && main_#t~ret408 <= 2147483647; [L4531] ~ldv_retval_1~0 := main_#t~ret408; [L4531] havoc main_#t~ret408; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4532] COND TRUE 0 == ~ldv_retval_1~0 [L4533] ~ldv_state_variable_0~0 := 3; [L4534] ~ldv_state_variable_2~0 := 1; [L4535] havoc ldv_initialize_block_device_operations_2_#t~ret396, ldv_initialize_block_device_operations_2_~tmp~27; [L4444] havoc ldv_initialize_block_device_operations_2_~tmp~27; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4447] CALL call ldv_initialize_block_device_operations_2_#t~ret396 := ldv_zalloc(464); VAL [#in~size=464, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND FALSE !(0 != ~tmp___0~4) [L3603] FCALL call #t~malloc134 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [L3603] #Ultimate.meminit_#ptr, #Ultimate.meminit_#amountOfFields, #Ultimate.meminit_#sizeOfFields, #Ultimate.meminit_#product := #t~malloc134, 1, (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296), (if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #Ultimate.meminit_#ptr!base); [L3603] ~tmp~7 := #t~malloc134; [L3604] ~p~1 := ~tmp~7; [L3605] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L3606] #res := ~p~1; [L4447] RET call ldv_initialize_block_device_operations_2_#t~ret396 := ldv_zalloc(464); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_#t~ret396!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_#t~ret396!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4447] ldv_initialize_block_device_operations_2_~tmp~27 := ldv_initialize_block_device_operations_2_#t~ret396; [L4447] havoc ldv_initialize_block_device_operations_2_#t~ret396; [L4448] ~virtblk_fops_group0~0 := ldv_initialize_block_device_operations_2_~tmp~27; [L4536] ~ldv_state_variable_1~0 := 1; [L4537] havoc ldv_initialize_virtio_driver_1_#t~ret395, ldv_initialize_virtio_driver_1_~tmp~26; [L4434] havoc ldv_initialize_virtio_driver_1_~tmp~26; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4437] CALL call ldv_initialize_virtio_driver_1_#t~ret395 := ldv_zalloc(1048); VAL [#in~size=1048, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND TRUE 0 != ~tmp___0~4 [L3601] #res := { base: 0, offset: 0 }; [L4437] RET call ldv_initialize_virtio_driver_1_#t~ret395 := ldv_zalloc(1048); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_#t~ret395!base=0, ldv_initialize_virtio_driver_1_#t~ret395!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4437] ldv_initialize_virtio_driver_1_~tmp~26 := ldv_initialize_virtio_driver_1_#t~ret395; [L4437] havoc ldv_initialize_virtio_driver_1_#t~ret395; [L4438] ~virtio_blk_group0~0 := ldv_initialize_virtio_driver_1_~tmp~26; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4541] COND FALSE !(0 != ~ldv_retval_1~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=false, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(main_#t~switch402) [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=false, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(main_#t~switch402) [L4559] main_#t~switch402 := main_#t~switch402 || 2 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE main_#t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4560] COND TRUE 0 != ~ldv_state_variable_2~0 [L4561] assume -2147483648 <= main_#t~nondet409 && main_#t~nondet409 <= 2147483647; [L4561] main_~tmp___5~2 := main_#t~nondet409; [L4561] havoc main_#t~nondet409; [L4563] main_#t~switch410 := 0 == main_~tmp___5~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4562-L4581] COND TRUE main_#t~switch410 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4564] COND TRUE 1 == ~ldv_state_variable_2~0 [L4565] FCALL call main_#t~mem411 := read~int(main_~#ldvarg3~0, 4); [L4565] virtblk_ioctl_#in~bdev, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := ~virtblk_fops_group0~0, main_#t~mem411, main_~ldvarg2~0, main_~ldvarg1~0; [L4565] havoc virtblk_ioctl_#res; [L4565] havoc virtblk_ioctl_#t~mem267, virtblk_ioctl_#t~mem268, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271, virtblk_ioctl_#t~ret272, virtblk_ioctl_#t~mem273, virtblk_ioctl_#t~ret274, virtblk_ioctl_~bdev, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0, virtblk_ioctl_~vblk~3, virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~21, virtblk_ioctl_~tmp___0~12, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4106-L4153] virtblk_ioctl_~bdev := virtblk_ioctl_#in~bdev; [L4106-L4153] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4106-L4153] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4106-L4153] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4109] havoc virtblk_ioctl_~disk~0; [L4110] havoc virtblk_ioctl_~vblk~3; [L4111] havoc virtblk_ioctl_~usr_data~0; [L4112] FCALL call virtblk_ioctl_~#id_str~0 := #Ultimate.alloc(20); [L4113] havoc virtblk_ioctl_~err~1; [L4114] havoc virtblk_ioctl_~tmp~21; [L4115] havoc virtblk_ioctl_~tmp___0~12; [L4116] havoc virtblk_ioctl_~tmp___1~6; [L4117] havoc virtblk_ioctl_~tmp___2~2; [L4120] FCALL call virtblk_ioctl_#t~mem267 := read~$Pointer$({ base: virtblk_ioctl_~bdev!base, offset: 240 + virtblk_ioctl_~bdev!offset }, 8); [L4120] virtblk_ioctl_~disk~0 := virtblk_ioctl_#t~mem267; [L4120] havoc virtblk_ioctl_#t~mem267; [L4121] FCALL call virtblk_ioctl_#t~mem268 := read~$Pointer$({ base: virtblk_ioctl_~disk~0!base, offset: 1075 + virtblk_ioctl_~disk~0!offset }, 8); [L4121] virtblk_ioctl_~vblk~3 := virtblk_ioctl_#t~mem268; [L4121] havoc virtblk_ioctl_#t~mem268; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4122] COND TRUE 1447184708 == virtblk_ioctl_~cmd % 4294967296 [L4123] virtblk_ioctl_~usr_data~0 := { base: 0, offset: (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L4124] virtblk_get_id_#in~disk, virtblk_get_id_#in~id_str := virtblk_ioctl_~disk~0, virtblk_ioctl_~#id_str~0; [L4124] havoc virtblk_get_id_#res; [L4124] havoc virtblk_get_id_#t~mem252, virtblk_get_id_#t~mem253, virtblk_get_id_#t~mem254, virtblk_get_id_#t~ret255, virtblk_get_id_#t~ret256, virtblk_get_id_#t~ret257, virtblk_get_id_#t~mem258, virtblk_get_id_#t~mem259, virtblk_get_id_#t~ret260, virtblk_get_id_#t~ret261, virtblk_get_id_#t~ret262, virtblk_get_id_#t~mem263, virtblk_get_id_#t~mem264, virtblk_get_id_#t~mem265, virtblk_get_id_#t~ret266, virtblk_get_id_~disk, virtblk_get_id_~id_str, virtblk_get_id_~vblk~2, virtblk_get_id_~req~1, virtblk_get_id_~bio~0, virtblk_get_id_~tmp~20, virtblk_get_id_~tmp___0~11, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1; [L4071-L4105] virtblk_get_id_~disk := virtblk_get_id_#in~disk; [L4071-L4105] virtblk_get_id_~id_str := virtblk_get_id_#in~id_str; [L4073] havoc virtblk_get_id_~vblk~2; [L4074] havoc virtblk_get_id_~req~1; [L4075] havoc virtblk_get_id_~bio~0; [L4076] havoc virtblk_get_id_~tmp~20; [L4077] havoc virtblk_get_id_~tmp___0~11; [L4078] havoc virtblk_get_id_~tmp___1~5; [L4079] havoc virtblk_get_id_~tmp___2~1; [L4080] havoc virtblk_get_id_~tmp___3~1; [L4083] FCALL call virtblk_get_id_#t~mem252 := read~$Pointer$({ base: virtblk_get_id_~disk!base, offset: 1075 + virtblk_get_id_~disk!offset }, 8); [L4083] virtblk_get_id_~vblk~2 := virtblk_get_id_#t~mem252; [L4083] havoc virtblk_get_id_#t~mem252; [L4084] FCALL call virtblk_get_id_#t~mem253 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4084] FCALL call virtblk_get_id_#t~mem254 := read~$Pointer$({ base: virtblk_get_id_#t~mem253!base, offset: 1067 + virtblk_get_id_#t~mem253!offset }, 8); [L4084] FCALL call virtblk_get_id_#t~ret255 := bio_map_kern(virtblk_get_id_#t~mem254, virtblk_get_id_~id_str, 20, 208); [L4084] virtblk_get_id_~bio~0 := virtblk_get_id_#t~ret255; [L4084] havoc virtblk_get_id_#t~mem253; [L4084] havoc virtblk_get_id_#t~ret255; [L4084] havoc virtblk_get_id_#t~mem254; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4085] CALL call virtblk_get_id_#t~ret256 := IS_ERR(virtblk_get_id_~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4615-L4623] ~ptr := #in~ptr; [L4617] havoc ~tmp~31; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4643-L4650] ~ptr := #in~ptr; [L4648] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4620] RET call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret416=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L4085] RET call virtblk_get_id_#t~ret256 := IS_ERR(virtblk_get_id_~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret256=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4085] assume -9223372036854775808 <= virtblk_get_id_#t~ret256 && virtblk_get_id_#t~ret256 <= 9223372036854775807; [L4085] virtblk_get_id_~tmp___0~11 := virtblk_get_id_#t~ret256; [L4085] havoc virtblk_get_id_#t~ret256; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4086] COND FALSE !(0 != virtblk_get_id_~tmp___0~11) [L4092] FCALL call virtblk_get_id_#t~mem258 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4092] FCALL call virtblk_get_id_#t~mem259 := read~$Pointer$({ base: virtblk_get_id_#t~mem258!base, offset: 1067 + virtblk_get_id_#t~mem258!offset }, 8); [L4092] ldv_blk_make_request_5_#in~ldv_func_arg1, ldv_blk_make_request_5_#in~ldv_func_arg2, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem259, virtblk_get_id_~bio~0, 208; [L4092] havoc ldv_blk_make_request_5_#res; [L4092] havoc ldv_blk_make_request_5_#t~ret417, ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~tmp~32; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg1 := ldv_blk_make_request_5_#in~ldv_func_arg1; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg2 := ldv_blk_make_request_5_#in~ldv_func_arg2; [L4624-L4633] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4627] havoc ldv_blk_make_request_5_~tmp~32; [L4630] ldv_blk_make_request_#in~mask := ldv_blk_make_request_5_~ldv_func_arg3; [L4630] havoc ldv_blk_make_request_#res; [L4630] havoc ldv_blk_make_request_#t~ret421, ldv_blk_make_request_#t~ret422, ldv_blk_make_request_~mask, ldv_blk_make_request_~res~1, ldv_blk_make_request_~tmp~36, ldv_blk_make_request_~tmp___0~17; [L4726-L4753] ldv_blk_make_request_~mask := ldv_blk_make_request_#in~mask; [L4728] havoc ldv_blk_make_request_~res~1; [L4729] havoc ldv_blk_make_request_~tmp~36; [L4730] havoc ldv_blk_make_request_~tmp___0~17; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4733] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4738] CALL call ldv_blk_make_request_#t~ret421 := ldv_undef_ptr(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3621] havoc ~tmp~9; [L3624] ~tmp~9 := #t~nondet136; [L3624] havoc #t~nondet136; [L3625] #res := ~tmp~9; [L4738] RET call ldv_blk_make_request_#t~ret421 := ldv_undef_ptr(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#t~ret421!base=18446744073709553690, ldv_blk_make_request_#t~ret421!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4738] ldv_blk_make_request_~tmp~36 := ldv_blk_make_request_#t~ret421; [L4738] havoc ldv_blk_make_request_#t~ret421; [L4739] ldv_blk_make_request_~res~1 := ldv_blk_make_request_~tmp~36; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4740] COND TRUE 0 != (ldv_blk_make_request_~res~1!base + ldv_blk_make_request_~res~1!offset) % 18446744073709551616 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4745] IS_ERR___0_#in~ptr := ldv_blk_make_request_~res~1; [L4745] havoc IS_ERR___0_#res; [L4745] havoc IS_ERR___0_#t~ret419, IS_ERR___0_~ptr, IS_ERR___0_~tmp~34; [L4686-L4694] IS_ERR___0_~ptr := IS_ERR___0_#in~ptr; [L4688] havoc IS_ERR___0_~tmp~34; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4691] CALL call IS_ERR___0_#t~ret419 := ldv__builtin_expect((if !!((IS_ERR___0_~ptr!base + IS_ERR___0_~ptr!offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#in~c=0, #in~exp=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3655-L3662] ~exp := #in~exp; [L3655-L3662] ~c := #in~c; [L3660] #res := ~exp; [L4691] RET call IS_ERR___0_#t~ret419 := ldv__builtin_expect((if !!((IS_ERR___0_~ptr!base + IS_ERR___0_~ptr!offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#t~ret419=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem258!base=78, virtblk_get_id_#t~mem258!offset=2468, virtblk_get_id_#t~mem259!base=77, virtblk_get_id_#t~mem259!offset=83, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4691] assume -9223372036854775808 <= IS_ERR___0_#t~ret419 && IS_ERR___0_#t~ret419 <= 9223372036854775807; [L4691] IS_ERR___0_~tmp~34 := IS_ERR___0_#t~ret419; [L4691] havoc IS_ERR___0_#t~ret419; [L4692] IS_ERR___0_#res := IS_ERR___0_~tmp~34; [L4745] ldv_blk_make_request_#t~ret422 := IS_ERR___0_#res; [L4745] assume -9223372036854775808 <= ldv_blk_make_request_#t~ret422 && ldv_blk_make_request_#t~ret422 <= 9223372036854775807; [L4745] ldv_blk_make_request_~tmp___0~17 := ldv_blk_make_request_#t~ret422; [L4745] havoc ldv_blk_make_request_#t~ret422; [L4746-L4750] COND FALSE !(0 != ldv_blk_make_request_~tmp___0~17) [L4749] ~ldv_blk_rq~0 := 1; [L4751] ldv_blk_make_request_#res := ldv_blk_make_request_~res~1; [L4630] ldv_blk_make_request_5_#t~ret417 := ldv_blk_make_request_#res; [L4630] ldv_blk_make_request_5_~tmp~32 := ldv_blk_make_request_5_#t~ret417; [L4630] havoc ldv_blk_make_request_5_#t~ret417; [L4631] ldv_blk_make_request_5_#res := ldv_blk_make_request_5_~tmp~32; [L4092] virtblk_get_id_#t~ret260 := ldv_blk_make_request_5_#res; [L4092] virtblk_get_id_~req~1 := virtblk_get_id_#t~ret260; [L4092] havoc virtblk_get_id_#t~mem259; [L4092] havoc virtblk_get_id_#t~mem258; [L4092] havoc virtblk_get_id_#t~ret260; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4093] CALL call virtblk_get_id_#t~ret261 := IS_ERR(virtblk_get_id_~req~1); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4615-L4623] ~ptr := #in~ptr; [L4617] havoc ~tmp~31; VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=18446744073709553690, ~ptr!offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4643-L4650] ~ptr := #in~ptr; [L4648] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4620] RET call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~ret416=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=18446744073709553690, ~ptr!offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L4093] RET call virtblk_get_id_#t~ret261 := IS_ERR(virtblk_get_id_~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret261=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4093] assume -9223372036854775808 <= virtblk_get_id_#t~ret261 && virtblk_get_id_#t~ret261 <= 9223372036854775807; [L4093] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret261; [L4093] havoc virtblk_get_id_#t~ret261; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4094] COND FALSE !(0 != virtblk_get_id_~tmp___2~1) [L4101] FCALL call write~int(7, { base: virtblk_get_id_~req~1!base, offset: 64 + virtblk_get_id_~req~1!offset }, 4); [L4102] FCALL call virtblk_get_id_#t~mem263 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4102] FCALL call virtblk_get_id_#t~mem264 := read~$Pointer$({ base: virtblk_get_id_#t~mem263!base, offset: 1067 + virtblk_get_id_#t~mem263!offset }, 8); [L4102] FCALL call virtblk_get_id_#t~mem265 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4102] FCALL call virtblk_get_id_#t~ret266 := blk_execute_rq(virtblk_get_id_#t~mem264, virtblk_get_id_#t~mem265, virtblk_get_id_~req~1, 0); [L4102] assume -2147483648 <= virtblk_get_id_#t~ret266 && virtblk_get_id_#t~ret266 <= 2147483647; [L4102] virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret266; [L4102] havoc virtblk_get_id_#t~mem263; [L4102] havoc virtblk_get_id_#t~mem265; [L4102] havoc virtblk_get_id_#t~mem264; [L4102] havoc virtblk_get_id_#t~ret266; [L4103] virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_~#id_str~0!base=74, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~mode=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4124] virtblk_ioctl_#t~ret269 := virtblk_get_id_#res; [L4124] assume -2147483648 <= virtblk_ioctl_#t~ret269 && virtblk_ioctl_#t~ret269 <= 2147483647; [L4124] virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret269; [L4124] havoc virtblk_ioctl_#t~ret269; [L4125] COND TRUE 0 == virtblk_ioctl_~err~1 [L4126] copy_to_user_#in~dst, copy_to_user_#in~src, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, 20; [L4126] havoc copy_to_user_#res; [L4126] havoc copy_to_user_#t~ret36, copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size, copy_to_user_~tmp~0; [L3214-L3223] copy_to_user_~dst := copy_to_user_#in~dst; [L3214-L3223] copy_to_user_~src := copy_to_user_#in~src; [L3214-L3223] copy_to_user_~size := copy_to_user_#in~size; [L3216] havoc copy_to_user_~tmp~0; [L3219] FCALL call might_fault(); [L3220] FCALL call copy_to_user_#t~ret36 := _copy_to_user(copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size); [L3220] copy_to_user_~tmp~0 := copy_to_user_#t~ret36; [L3220] havoc copy_to_user_#t~ret36; [L3221] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4126] virtblk_ioctl_#t~ret270 := copy_to_user_#res; [L4126] assume -2147483648 <= virtblk_ioctl_#t~ret270 && virtblk_ioctl_#t~ret270 <= 2147483647; [L4126] virtblk_ioctl_~tmp~21 := virtblk_ioctl_#t~ret270; [L4126] havoc virtblk_ioctl_#t~ret270; [L4127] COND TRUE 0 != virtblk_ioctl_~tmp~21 [L4128] virtblk_ioctl_~err~1 := -14; [L4135] virtblk_ioctl_#res := virtblk_ioctl_~err~1; [L4112] FCALL call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0); [L4135] havoc virtblk_ioctl_~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~mem411=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4565] main_#t~ret412 := virtblk_ioctl_#res; [L4565] assume -2147483648 <= main_#t~ret412 && main_#t~ret412 <= 2147483647; [L4565] havoc main_#t~mem411; [L4565] havoc main_#t~ret412; [L4566] ~ldv_state_variable_2~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=2, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= main_#t~nondet401 && main_#t~nondet401 <= 2147483647; [L4480] main_~tmp___2~4 := main_#t~nondet401; [L4480] havoc main_#t~nondet401; [L4482] main_#t~switch402 := 0 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=false, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(main_#t~switch402) [L4516] main_#t~switch402 := main_#t~switch402 || 1 == main_~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE main_#t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=1, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4517] COND TRUE 0 != ~ldv_state_variable_0~0 [L4518] assume -2147483648 <= main_#t~nondet406 && main_#t~nondet406 <= 2147483647; [L4518] main_~tmp___4~2 := main_#t~nondet406; [L4518] havoc main_#t~nondet406; [L4520] main_#t~switch407 := 0 == main_~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND TRUE main_#t~switch407 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4521] COND TRUE 3 == ~ldv_state_variable_0~0 && 0 == ~ref_cnt~0 [L4422] FCALL call unregister_blkdev(~major~0, #t~string394); [L4423] FCALL call unregister_virtio_driver(~#virtio_blk~0); [L4523] ~ldv_state_variable_0~0 := 2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4773] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#amount=4, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, #Ultimate.C_memset_#t~loopctr424=4, #Ultimate.C_memset_#value=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=9223372036854775807, copy_to_user_#in~size=20, copy_to_user_#in~src!base=74, copy_to_user_#in~src!offset=0, copy_to_user_#res=-2147483648, copy_to_user_#t~ret36=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=9223372036854775807, copy_to_user_~size=20, copy_to_user_~src!base=74, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=2147483648, init_#res=0, init_#t~ret393=0, init_~tmp~25=0, IS_ERR___0_#in~ptr!base=18446744073709553690, IS_ERR___0_#in~ptr!offset=-62, IS_ERR___0_#res=0, IS_ERR___0_~ptr!base=18446744073709553690, IS_ERR___0_~ptr!offset=-62, IS_ERR___0_~tmp~34=0, ldv_blk_make_request_#in~mask=208, ldv_blk_make_request_#res!base=18446744073709553690, ldv_blk_make_request_#res!offset=-62, ldv_blk_make_request_5_#in~ldv_func_arg1!base=77, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=83, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709553690, ldv_blk_make_request_5_#res!offset=-62, ldv_blk_make_request_5_~ldv_func_arg1!base=77, ldv_blk_make_request_5_~ldv_func_arg1!offset=83, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~tmp~32!base=18446744073709553690, ldv_blk_make_request_5_~tmp~32!offset=-62, ldv_blk_make_request_~mask=208, ldv_blk_make_request_~res~1!base=18446744073709553690, ldv_blk_make_request_~res~1!offset=-62, ldv_blk_make_request_~tmp___0~17=0, ldv_blk_make_request_~tmp~36!base=18446744073709553690, ldv_blk_make_request_~tmp~36!offset=-62, ldv_initialize_block_device_operations_2_~tmp~27!base=-142482651225332576681985, ldv_initialize_block_device_operations_2_~tmp~27!offset=0, ldv_initialize_virtio_driver_1_~tmp~26!base=0, ldv_initialize_virtio_driver_1_~tmp~26!offset=0, main_#t~switch402=true, main_#t~switch407=true, main_#t~switch410=true, main_~#ldvarg3~0!base=18446744073709553690, main_~#ldvarg3~0!offset=0, main_~ldvarg0~0!base=2, main_~ldvarg0~0!offset=0, main_~ldvarg1~0=9223372036854775807, main_~ldvarg2~0=1447184708, main_~tmp___0~15!base=2, main_~tmp___0~15!offset=0, main_~tmp___1~8=1447184708, main_~tmp___2~4=1, main_~tmp___4~2=0, main_~tmp___5~2=0, main_~tmp~28=9223372036854775807, virtblk_get_id_#in~disk!base=70, virtblk_get_id_#in~disk!offset=4159, virtblk_get_id_#in~id_str!base=74, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=70, virtblk_get_id_~disk!offset=4159, virtblk_get_id_~id_str!base=74, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709553690, virtblk_get_id_~req~1!offset=-62, virtblk_get_id_~tmp___0~11=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=76, virtblk_get_id_~vblk~2!offset=-4429, virtblk_ioctl_#in~bdev!base=-142482651225332576681985, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=9223372036854775807, virtblk_ioctl_#in~mode=0, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret270=0, virtblk_ioctl_~bdev!base=-142482651225332576681985, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=9223372036854775807, virtblk_ioctl_~disk~0!base=70, virtblk_ioctl_~disk~0!offset=4159, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=0, virtblk_ioctl_~tmp~21=-2147483648, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=9223372036854775807, virtblk_ioctl_~vblk~3!base=76, virtblk_ioctl_~vblk~3!offset=-4429, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4776] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3643] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3323] FCALL call #t~string108 := #Ultimate.alloc(28); [L4239] FCALL call #t~string292 := #Ultimate.alloc(22); [L4243] FCALL call #t~string295 := #Ultimate.alloc(9); [L4277] FCALL call #t~string309 := #Ultimate.alloc(5); [L4277] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4277] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(0, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4280] FCALL call #t~string312 := #Ultimate.alloc(7); [L4280] FCALL call write~init~int(118, { base: #t~string312!base, offset: #t~string312!offset }, 1); [L4280] FCALL call write~init~int(100, { base: #t~string312!base, offset: 1 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(37, { base: #t~string312!base, offset: 2 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(99, { base: #t~string312!base, offset: 3 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(37, { base: #t~string312!base, offset: 4 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(99, { base: #t~string312!base, offset: 5 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(0, { base: #t~string312!base, offset: 6 + #t~string312!offset }, 1); [L4285] FCALL call #t~string315 := #Ultimate.alloc(9); [L4400] FCALL call #t~string390 := #Ultimate.alloc(11); [L4407] FCALL call #t~string391 := #Ultimate.alloc(8); [L4422] FCALL call #t~string394 := #Ultimate.alloc(8); [L3672] ~LDV_IN_INTERRUPT~0 := 1; [L3674] ~ldv_state_variable_2~0 := 0; [L3675] ~ref_cnt~0 := 0; [L3676] ~ldv_state_variable_1~0 := 0; [L3678] ~ldv_state_variable_0~0 := 0; [L3823] ~major~0 := 0; [L3824] ~index~0 := 0; [L4396-L4399] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4396-L4399] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4428] ~ldv_retval_0~0 := 0; [L4429] ~ldv_retval_1~0 := 0; [L4695] ~ldv_blk_rq~0 := 0; [L3673] ~virtblk_fops_group0~0 := { base: 0, offset: 0 }; [L3677] ~virtio_blk_group0~0 := { base: 0, offset: 0 }; [L4177-L4178] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4394-L4395] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4394-L4395] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4400-L4401] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4400-L4401] FCALL call write~init~$Pointer$(#t~string390, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4400-L4401] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4427] ~__mod_virtio_device_table~0!device := 0; [L4427] ~__mod_virtio_device_table~0!vendor := 0; [L4454] havoc ~ldvarg1~0; [L4455] havoc ~tmp~28; [L4456] FCALL call ~#ldvarg3~0 := #Ultimate.alloc(4); [L4457] havoc ~ldvarg0~0; [L4458] havoc ~tmp___0~15; [L4459] havoc ~ldvarg2~0; [L4460] havoc ~tmp___1~8; [L4461] havoc ~tmp___2~4; [L4462] havoc ~tmp___3~3; [L4463] havoc ~tmp___4~2; [L4464] havoc ~tmp___5~2; [L4467] ~tmp~28 := #t~nondet397; [L4467] havoc #t~nondet397; [L4468] ~ldvarg1~0 := ~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4469] CALL call #t~ret398 := ldv_zalloc(16); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND FALSE !(0 != ~tmp___0~4) [L3603] FCALL call #t~malloc134 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr!base); [L3603] ~tmp~7 := #t~malloc134; [L3604] ~p~1 := ~tmp~7; [L3605] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L3606] #res := ~p~1; [L4469] RET call #t~ret398 := ldv_zalloc(16); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4469] ~tmp___0~15 := #t~ret398; [L4469] havoc #t~ret398; [L4470] ~ldvarg0~0 := ~tmp___0~15; [L4471] ~tmp___1~8 := #t~nondet399; [L4471] havoc #t~nondet399; [L4472] ~ldvarg2~0 := ~tmp___1~8; [L4473] FCALL call ldv_initialize(); [?] #t~loopctr424 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #t~loopctr424 < #amount [?] #memory_int[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := #value; [?] #memory_$Pointer$[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := { base: 0, offset: #value % 256 }; [?] #t~loopctr424 := 1 + #t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #t~loopctr424 < #amount [?] #memory_int[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := #value; [?] #memory_$Pointer$[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := { base: 0, offset: #value % 256 }; [?] #t~loopctr424 := 1 + #t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #t~loopctr424 < #amount [?] #memory_int[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := #value; [?] #memory_$Pointer$[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := { base: 0, offset: #value % 256 }; [?] #t~loopctr424 := 1 + #t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #t~loopctr424 < #amount [?] #memory_int[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := #value; [?] #memory_$Pointer$[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := { base: 0, offset: #value % 256 }; [?] #t~loopctr424 := 1 + #t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND FALSE !(#t~loopctr424 < #amount) [?] free ensures #res == #ptr; [L4474] havoc #t~memset~res400; [L4475] ~ldv_state_variable_1~0 := 0; [L4476] ~ref_cnt~0 := 0; [L4477] ~ldv_state_variable_0~0 := 1; [L4478] ~ldv_state_variable_2~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= #t~nondet401 && #t~nondet401 <= 2147483647; [L4480] ~tmp___2~4 := #t~nondet401; [L4480] havoc #t~nondet401; [L4482] #t~switch402 := 0 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(#t~switch402) [L4516] #t~switch402 := #t~switch402 || 1 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE #t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4517] COND TRUE 0 != ~ldv_state_variable_0~0 [L4518] assume -2147483648 <= #t~nondet406 && #t~nondet406 <= 2147483647; [L4518] ~tmp___4~2 := #t~nondet406; [L4518] havoc #t~nondet406; [L4520] #t~switch407 := 0 == ~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND FALSE !(#t~switch407) [L4529] #t~switch407 := #t~switch407 || 1 == ~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND TRUE #t~switch407 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4530] COND TRUE 1 == ~ldv_state_variable_0~0 [L4404] havoc ~tmp~25; [L4407] FCALL call #t~ret392 := register_blkdev(0, #t~string391); [L4407] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4407] ~major~0 := #t~ret392; [L4407] havoc #t~ret392; [L4408] COND FALSE !(~major~0 < 0) [L4413] FCALL call #t~ret393 := register_virtio_driver(~#virtio_blk~0); [L4413] assume -2147483648 <= #t~ret393 && #t~ret393 <= 2147483647; [L4413] ~tmp~25 := #t~ret393; [L4413] havoc #t~ret393; [L4414] #res := ~tmp~25; [L4531] assume -2147483648 <= #t~ret408 && #t~ret408 <= 2147483647; [L4531] ~ldv_retval_1~0 := #t~ret408; [L4531] havoc #t~ret408; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4532] COND TRUE 0 == ~ldv_retval_1~0 [L4533] ~ldv_state_variable_0~0 := 3; [L4534] ~ldv_state_variable_2~0 := 1; [L4444] havoc ~tmp~27; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4447] CALL call #t~ret396 := ldv_zalloc(464); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND FALSE !(0 != ~tmp___0~4) [L3603] FCALL call #t~malloc134 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr!base); [L3603] ~tmp~7 := #t~malloc134; [L3604] ~p~1 := ~tmp~7; [L3605] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L3606] #res := ~p~1; [L4447] RET call #t~ret396 := ldv_zalloc(464); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4447] ~tmp~27 := #t~ret396; [L4447] havoc #t~ret396; [L4448] ~virtblk_fops_group0~0 := ~tmp~27; [L4536] ~ldv_state_variable_1~0 := 1; [L4434] havoc ~tmp~26; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4437] CALL call #t~ret395 := ldv_zalloc(1048); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND TRUE 0 != ~tmp___0~4 [L3601] #res := { base: 0, offset: 0 }; [L4437] RET call #t~ret395 := ldv_zalloc(1048); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4437] ~tmp~26 := #t~ret395; [L4437] havoc #t~ret395; [L4438] ~virtio_blk_group0~0 := ~tmp~26; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4541] COND FALSE !(0 != ~ldv_retval_1~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= #t~nondet401 && #t~nondet401 <= 2147483647; [L4480] ~tmp___2~4 := #t~nondet401; [L4480] havoc #t~nondet401; [L4482] #t~switch402 := 0 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(#t~switch402) [L4516] #t~switch402 := #t~switch402 || 1 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(#t~switch402) [L4559] #t~switch402 := #t~switch402 || 2 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE #t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4560] COND TRUE 0 != ~ldv_state_variable_2~0 [L4561] assume -2147483648 <= #t~nondet409 && #t~nondet409 <= 2147483647; [L4561] ~tmp___5~2 := #t~nondet409; [L4561] havoc #t~nondet409; [L4563] #t~switch410 := 0 == ~tmp___5~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4562-L4581] COND TRUE #t~switch410 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4564] COND TRUE 1 == ~ldv_state_variable_2~0 [L4565] FCALL call #t~mem411 := read~int(~#ldvarg3~0, 4); [L4106-L4153] ~bdev := #in~bdev; [L4106-L4153] ~mode := #in~mode; [L4106-L4153] ~cmd := #in~cmd; [L4106-L4153] ~data := #in~data; [L4109] havoc ~disk~0; [L4110] havoc ~vblk~3; [L4111] havoc ~usr_data~0; [L4112] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4113] havoc ~err~1; [L4114] havoc ~tmp~21; [L4115] havoc ~tmp___0~12; [L4116] havoc ~tmp___1~6; [L4117] havoc ~tmp___2~2; [L4120] FCALL call #t~mem267 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4120] ~disk~0 := #t~mem267; [L4120] havoc #t~mem267; [L4121] FCALL call #t~mem268 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4121] ~vblk~3 := #t~mem268; [L4121] havoc #t~mem268; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4122] COND TRUE 1447184708 == ~cmd % 4294967296 [L4123] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L4071-L4105] ~disk := #in~disk; [L4071-L4105] ~id_str := #in~id_str; [L4073] havoc ~vblk~2; [L4074] havoc ~req~1; [L4075] havoc ~bio~0; [L4076] havoc ~tmp~20; [L4077] havoc ~tmp___0~11; [L4078] havoc ~tmp___1~5; [L4079] havoc ~tmp___2~1; [L4080] havoc ~tmp___3~1; [L4083] FCALL call #t~mem252 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L4083] ~vblk~2 := #t~mem252; [L4083] havoc #t~mem252; [L4084] FCALL call #t~mem253 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4084] FCALL call #t~mem254 := read~$Pointer$({ base: #t~mem253!base, offset: 1067 + #t~mem253!offset }, 8); [L4084] FCALL call #t~ret255 := bio_map_kern(#t~mem254, ~id_str, 20, 208); [L4084] ~bio~0 := #t~ret255; [L4084] havoc #t~mem253; [L4084] havoc #t~ret255; [L4084] havoc #t~mem254; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4085] CALL call #t~ret256 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4615-L4623] ~ptr := #in~ptr; [L4617] havoc ~tmp~31; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4643-L4650] ~ptr := #in~ptr; [L4648] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4620] RET call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret416=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L4085] RET call #t~ret256 := IS_ERR(~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4085] assume -9223372036854775808 <= #t~ret256 && #t~ret256 <= 9223372036854775807; [L4085] ~tmp___0~11 := #t~ret256; [L4085] havoc #t~ret256; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4086] COND FALSE !(0 != ~tmp___0~11) [L4092] FCALL call #t~mem258 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4092] FCALL call #t~mem259 := read~$Pointer$({ base: #t~mem258!base, offset: 1067 + #t~mem258!offset }, 8); [L4624-L4633] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4624-L4633] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4624-L4633] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4627] havoc ~tmp~32; [L4726-L4753] ~mask := #in~mask; [L4728] havoc ~res~1; [L4729] havoc ~tmp~36; [L4730] havoc ~tmp___0~17; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4733] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4738] CALL call #t~ret421 := ldv_undef_ptr(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3621] havoc ~tmp~9; [L3624] ~tmp~9 := #t~nondet136; [L3624] havoc #t~nondet136; [L3625] #res := ~tmp~9; [L4738] RET call #t~ret421 := ldv_undef_ptr(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4738] ~tmp~36 := #t~ret421; [L4738] havoc #t~ret421; [L4739] ~res~1 := ~tmp~36; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4740] COND TRUE 0 != (~res~1!base + ~res~1!offset) % 18446744073709551616 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4686-L4694] ~ptr := #in~ptr; [L4688] havoc ~tmp~34; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4691] CALL call #t~ret419 := ldv__builtin_expect((if !!((~ptr!base + ~ptr!offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#in~c=0, #in~exp=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3655-L3662] ~exp := #in~exp; [L3655-L3662] ~c := #in~c; [L3660] #res := ~exp; [L4691] RET call #t~ret419 := ldv__builtin_expect((if !!((~ptr!base + ~ptr!offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4691] assume -9223372036854775808 <= #t~ret419 && #t~ret419 <= 9223372036854775807; [L4691] ~tmp~34 := #t~ret419; [L4691] havoc #t~ret419; [L4692] #res := ~tmp~34; [L4745] assume -9223372036854775808 <= #t~ret422 && #t~ret422 <= 9223372036854775807; [L4745] ~tmp___0~17 := #t~ret422; [L4745] havoc #t~ret422; [L4746-L4750] COND FALSE !(0 != ~tmp___0~17) [L4749] ~ldv_blk_rq~0 := 1; [L4751] #res := ~res~1; [L4630] ~tmp~32 := #t~ret417; [L4630] havoc #t~ret417; [L4631] #res := ~tmp~32; [L4092] ~req~1 := #t~ret260; [L4092] havoc #t~mem259; [L4092] havoc #t~mem258; [L4092] havoc #t~ret260; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4093] CALL call #t~ret261 := IS_ERR(~req~1); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4615-L4623] ~ptr := #in~ptr; [L4617] havoc ~tmp~31; VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=18446744073709553690, ~ptr!offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4643-L4650] ~ptr := #in~ptr; [L4648] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4620] RET call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~ret416=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=18446744073709553690, ~ptr!offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L4093] RET call #t~ret261 := IS_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4093] assume -9223372036854775808 <= #t~ret261 && #t~ret261 <= 9223372036854775807; [L4093] ~tmp___2~1 := #t~ret261; [L4093] havoc #t~ret261; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4094] COND FALSE !(0 != ~tmp___2~1) [L4101] FCALL call write~int(7, { base: ~req~1!base, offset: 64 + ~req~1!offset }, 4); [L4102] FCALL call #t~mem263 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4102] FCALL call #t~mem264 := read~$Pointer$({ base: #t~mem263!base, offset: 1067 + #t~mem263!offset }, 8); [L4102] FCALL call #t~mem265 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4102] FCALL call #t~ret266 := blk_execute_rq(#t~mem264, #t~mem265, ~req~1, 0); [L4102] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4102] ~tmp___3~1 := #t~ret266; [L4102] havoc #t~mem263; [L4102] havoc #t~mem265; [L4102] havoc #t~mem264; [L4102] havoc #t~ret266; [L4103] #res := ~tmp___3~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4124] assume -2147483648 <= #t~ret269 && #t~ret269 <= 2147483647; [L4124] ~err~1 := #t~ret269; [L4124] havoc #t~ret269; [L4125] COND TRUE 0 == ~err~1 [L3214-L3223] ~dst := #in~dst; [L3214-L3223] ~src := #in~src; [L3214-L3223] ~size := #in~size; [L3216] havoc ~tmp~0; [L3219] FCALL call might_fault(); [L3220] FCALL call #t~ret36 := _copy_to_user(~dst, ~src, ~size); [L3220] ~tmp~0 := #t~ret36; [L3220] havoc #t~ret36; [L3221] #res := (if ~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then ~tmp~0 % 18446744073709551616 % 4294967296 else ~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4126] assume -2147483648 <= #t~ret270 && #t~ret270 <= 2147483647; [L4126] ~tmp~21 := #t~ret270; [L4126] havoc #t~ret270; [L4127] COND TRUE 0 != ~tmp~21 [L4128] ~err~1 := -14; [L4135] #res := ~err~1; [L4112] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4135] havoc ~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4565] assume -2147483648 <= #t~ret412 && #t~ret412 <= 2147483647; [L4565] havoc #t~mem411; [L4565] havoc #t~ret412; [L4566] ~ldv_state_variable_2~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= #t~nondet401 && #t~nondet401 <= 2147483647; [L4480] ~tmp___2~4 := #t~nondet401; [L4480] havoc #t~nondet401; [L4482] #t~switch402 := 0 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(#t~switch402) [L4516] #t~switch402 := #t~switch402 || 1 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE #t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4517] COND TRUE 0 != ~ldv_state_variable_0~0 [L4518] assume -2147483648 <= #t~nondet406 && #t~nondet406 <= 2147483647; [L4518] ~tmp___4~2 := #t~nondet406; [L4518] havoc #t~nondet406; [L4520] #t~switch407 := 0 == ~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND TRUE #t~switch407 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4521] COND TRUE 3 == ~ldv_state_variable_0~0 && 0 == ~ref_cnt~0 [L4422] FCALL call unregister_blkdev(~major~0, #t~string394); [L4423] FCALL call unregister_virtio_driver(~#virtio_blk~0); [L4523] ~ldv_state_variable_0~0 := 2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4773] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4776] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3643] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] ----- [2018-11-23 03:02:45,789 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,789 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,790 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,790 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,791 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,791 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,791 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,792 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,792 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,792 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,793 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,793 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,794 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,794 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,794 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,795 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,795 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,795 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,796 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,796 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,797 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,797 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,798 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,811 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,812 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,812 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,812 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,812 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,812 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,813 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,813 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,813 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,813 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,814 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,814 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,814 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,814 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,814 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,815 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,815 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,815 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,815 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,816 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,816 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,816 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,816 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,817 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,817 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,817 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,817 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,818 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,818 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,818 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,818 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,818 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,818 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,852 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,853 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,853 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,853 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,853 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,853 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,854 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,854 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,854 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,854 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,855 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,855 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,855 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,855 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,856 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,856 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,856 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,857 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,857 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,857 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,857 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,858 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,858 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,858 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,858 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,859 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,859 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,859 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,859 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 03:02:45,860 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,860 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 03:02:45,860 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3323] FCALL call #t~string108 := #Ultimate.alloc(28); [L4239] FCALL call #t~string292 := #Ultimate.alloc(22); [L4243] FCALL call #t~string295 := #Ultimate.alloc(9); [L4277] FCALL call #t~string309 := #Ultimate.alloc(5); [L4277] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4277] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4277] FCALL call write~init~int(0, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4280] FCALL call #t~string312 := #Ultimate.alloc(7); [L4280] FCALL call write~init~int(118, { base: #t~string312!base, offset: #t~string312!offset }, 1); [L4280] FCALL call write~init~int(100, { base: #t~string312!base, offset: 1 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(37, { base: #t~string312!base, offset: 2 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(99, { base: #t~string312!base, offset: 3 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(37, { base: #t~string312!base, offset: 4 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(99, { base: #t~string312!base, offset: 5 + #t~string312!offset }, 1); [L4280] FCALL call write~init~int(0, { base: #t~string312!base, offset: 6 + #t~string312!offset }, 1); [L4285] FCALL call #t~string315 := #Ultimate.alloc(9); [L4400] FCALL call #t~string390 := #Ultimate.alloc(11); [L4407] FCALL call #t~string391 := #Ultimate.alloc(8); [L4422] FCALL call #t~string394 := #Ultimate.alloc(8); [L3672] ~LDV_IN_INTERRUPT~0 := 1; [L3674] ~ldv_state_variable_2~0 := 0; [L3675] ~ref_cnt~0 := 0; [L3676] ~ldv_state_variable_1~0 := 0; [L3678] ~ldv_state_variable_0~0 := 0; [L3823] ~major~0 := 0; [L3824] ~index~0 := 0; [L4396-L4399] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4396-L4399] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4396-L4399] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4428] ~ldv_retval_0~0 := 0; [L4429] ~ldv_retval_1~0 := 0; [L4695] ~ldv_blk_rq~0 := 0; [L3673] ~virtblk_fops_group0~0 := { base: 0, offset: 0 }; [L3677] ~virtio_blk_group0~0 := { base: 0, offset: 0 }; [L4177-L4178] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4177-L4178] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4394-L4395] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4394-L4395] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4394-L4395] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4400-L4401] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4400-L4401] FCALL call write~init~$Pointer$(#t~string390, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4400-L4401] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4400-L4401] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4427] ~__mod_virtio_device_table~0!device := 0; [L4427] ~__mod_virtio_device_table~0!vendor := 0; [L4454] havoc ~ldvarg1~0; [L4455] havoc ~tmp~28; [L4456] FCALL call ~#ldvarg3~0 := #Ultimate.alloc(4); [L4457] havoc ~ldvarg0~0; [L4458] havoc ~tmp___0~15; [L4459] havoc ~ldvarg2~0; [L4460] havoc ~tmp___1~8; [L4461] havoc ~tmp___2~4; [L4462] havoc ~tmp___3~3; [L4463] havoc ~tmp___4~2; [L4464] havoc ~tmp___5~2; [L4467] ~tmp~28 := #t~nondet397; [L4467] havoc #t~nondet397; [L4468] ~ldvarg1~0 := ~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4469] CALL call #t~ret398 := ldv_zalloc(16); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND FALSE !(0 != ~tmp___0~4) [L3603] FCALL call #t~malloc134 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr!base); [L3603] ~tmp~7 := #t~malloc134; [L3604] ~p~1 := ~tmp~7; [L3605] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L3606] #res := ~p~1; [L4469] RET call #t~ret398 := ldv_zalloc(16); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4469] ~tmp___0~15 := #t~ret398; [L4469] havoc #t~ret398; [L4470] ~ldvarg0~0 := ~tmp___0~15; [L4471] ~tmp___1~8 := #t~nondet399; [L4471] havoc #t~nondet399; [L4472] ~ldvarg2~0 := ~tmp___1~8; [L4473] FCALL call ldv_initialize(); [?] #t~loopctr424 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #t~loopctr424 < #amount [?] #memory_int[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := #value; [?] #memory_$Pointer$[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := { base: 0, offset: #value % 256 }; [?] #t~loopctr424 := 1 + #t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #t~loopctr424 < #amount [?] #memory_int[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := #value; [?] #memory_$Pointer$[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := { base: 0, offset: #value % 256 }; [?] #t~loopctr424 := 1 + #t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #t~loopctr424 < #amount [?] #memory_int[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := #value; [?] #memory_$Pointer$[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := { base: 0, offset: #value % 256 }; [?] #t~loopctr424 := 1 + #t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND TRUE #t~loopctr424 < #amount [?] #memory_int[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := #value; [?] #memory_$Pointer$[{ base: #ptr!base, offset: #ptr!offset + #t~loopctr424 }] := { base: 0, offset: #value % 256 }; [?] #t~loopctr424 := 1 + #t~loopctr424; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=0, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [?] COND FALSE !(#t~loopctr424 < #amount) [?] free ensures #res == #ptr; [L4474] havoc #t~memset~res400; [L4475] ~ldv_state_variable_1~0 := 0; [L4476] ~ref_cnt~0 := 0; [L4477] ~ldv_state_variable_0~0 := 1; [L4478] ~ldv_state_variable_2~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= #t~nondet401 && #t~nondet401 <= 2147483647; [L4480] ~tmp___2~4 := #t~nondet401; [L4480] havoc #t~nondet401; [L4482] #t~switch402 := 0 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(#t~switch402) [L4516] #t~switch402 := #t~switch402 || 1 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE #t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4517] COND TRUE 0 != ~ldv_state_variable_0~0 [L4518] assume -2147483648 <= #t~nondet406 && #t~nondet406 <= 2147483647; [L4518] ~tmp___4~2 := #t~nondet406; [L4518] havoc #t~nondet406; [L4520] #t~switch407 := 0 == ~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND FALSE !(#t~switch407) [L4529] #t~switch407 := #t~switch407 || 1 == ~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND TRUE #t~switch407 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4530] COND TRUE 1 == ~ldv_state_variable_0~0 [L4404] havoc ~tmp~25; [L4407] FCALL call #t~ret392 := register_blkdev(0, #t~string391); [L4407] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4407] ~major~0 := #t~ret392; [L4407] havoc #t~ret392; [L4408] COND FALSE !(~major~0 < 0) [L4413] FCALL call #t~ret393 := register_virtio_driver(~#virtio_blk~0); [L4413] assume -2147483648 <= #t~ret393 && #t~ret393 <= 2147483647; [L4413] ~tmp~25 := #t~ret393; [L4413] havoc #t~ret393; [L4414] #res := ~tmp~25; [L4531] assume -2147483648 <= #t~ret408 && #t~ret408 <= 2147483647; [L4531] ~ldv_retval_1~0 := #t~ret408; [L4531] havoc #t~ret408; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=1, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=0, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4532] COND TRUE 0 == ~ldv_retval_1~0 [L4533] ~ldv_state_variable_0~0 := 3; [L4534] ~ldv_state_variable_2~0 := 1; [L4444] havoc ~tmp~27; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4447] CALL call #t~ret396 := ldv_zalloc(464); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND FALSE !(0 != ~tmp___0~4) [L3603] FCALL call #t~malloc134 := #Ultimate.alloc((if ~size % 4294967296 % 4294967296 <= 2147483647 then ~size % 4294967296 % 4294967296 else ~size % 4294967296 % 4294967296 - 4294967296)); [?] #memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, #ptr!base); [L3603] ~tmp~7 := #t~malloc134; [L3604] ~p~1 := ~tmp~7; [L3605] assume 0 != (if 0 != (~p~1!base + ~p~1!offset) % 18446744073709551616 then 1 else 0); [L3606] #res := ~p~1; [L4447] RET call #t~ret396 := ldv_zalloc(464); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=0, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=0, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4447] ~tmp~27 := #t~ret396; [L4447] havoc #t~ret396; [L4448] ~virtblk_fops_group0~0 := ~tmp~27; [L4536] ~ldv_state_variable_1~0 := 1; [L4434] havoc ~tmp~26; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4437] CALL call #t~ret395 := ldv_zalloc(1048); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3592-L3609] ~size := #in~size; [L3594] havoc ~p~1; [L3595] havoc ~tmp~7; [L3596] havoc ~tmp___0~4; [L3599] assume -2147483648 <= #t~nondet133 && #t~nondet133 <= 2147483647; [L3599] ~tmp___0~4 := #t~nondet133; [L3599] havoc #t~nondet133; [L3600] COND TRUE 0 != ~tmp___0~4 [L3601] #res := { base: 0, offset: 0 }; [L4437] RET call #t~ret395 := ldv_zalloc(1048); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4437] ~tmp~26 := #t~ret395; [L4437] havoc #t~ret395; [L4438] ~virtio_blk_group0~0 := ~tmp~26; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4541] COND FALSE !(0 != ~ldv_retval_1~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= #t~nondet401 && #t~nondet401 <= 2147483647; [L4480] ~tmp___2~4 := #t~nondet401; [L4480] havoc #t~nondet401; [L4482] #t~switch402 := 0 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(#t~switch402) [L4516] #t~switch402 := #t~switch402 || 1 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(#t~switch402) [L4559] #t~switch402 := #t~switch402 || 2 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE #t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4560] COND TRUE 0 != ~ldv_state_variable_2~0 [L4561] assume -2147483648 <= #t~nondet409 && #t~nondet409 <= 2147483647; [L4561] ~tmp___5~2 := #t~nondet409; [L4561] havoc #t~nondet409; [L4563] #t~switch410 := 0 == ~tmp___5~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4562-L4581] COND TRUE #t~switch410 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4564] COND TRUE 1 == ~ldv_state_variable_2~0 [L4565] FCALL call #t~mem411 := read~int(~#ldvarg3~0, 4); [L4106-L4153] ~bdev := #in~bdev; [L4106-L4153] ~mode := #in~mode; [L4106-L4153] ~cmd := #in~cmd; [L4106-L4153] ~data := #in~data; [L4109] havoc ~disk~0; [L4110] havoc ~vblk~3; [L4111] havoc ~usr_data~0; [L4112] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4113] havoc ~err~1; [L4114] havoc ~tmp~21; [L4115] havoc ~tmp___0~12; [L4116] havoc ~tmp___1~6; [L4117] havoc ~tmp___2~2; [L4120] FCALL call #t~mem267 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4120] ~disk~0 := #t~mem267; [L4120] havoc #t~mem267; [L4121] FCALL call #t~mem268 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4121] ~vblk~3 := #t~mem268; [L4121] havoc #t~mem268; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4122] COND TRUE 1447184708 == ~cmd % 4294967296 [L4123] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L4071-L4105] ~disk := #in~disk; [L4071-L4105] ~id_str := #in~id_str; [L4073] havoc ~vblk~2; [L4074] havoc ~req~1; [L4075] havoc ~bio~0; [L4076] havoc ~tmp~20; [L4077] havoc ~tmp___0~11; [L4078] havoc ~tmp___1~5; [L4079] havoc ~tmp___2~1; [L4080] havoc ~tmp___3~1; [L4083] FCALL call #t~mem252 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L4083] ~vblk~2 := #t~mem252; [L4083] havoc #t~mem252; [L4084] FCALL call #t~mem253 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4084] FCALL call #t~mem254 := read~$Pointer$({ base: #t~mem253!base, offset: 1067 + #t~mem253!offset }, 8); [L4084] FCALL call #t~ret255 := bio_map_kern(#t~mem254, ~id_str, 20, 208); [L4084] ~bio~0 := #t~ret255; [L4084] havoc #t~mem253; [L4084] havoc #t~ret255; [L4084] havoc #t~mem254; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4085] CALL call #t~ret256 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4615-L4623] ~ptr := #in~ptr; [L4617] havoc ~tmp~31; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4643-L4650] ~ptr := #in~ptr; [L4648] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4620] RET call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret416=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L4085] RET call #t~ret256 := IS_ERR(~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4085] assume -9223372036854775808 <= #t~ret256 && #t~ret256 <= 9223372036854775807; [L4085] ~tmp___0~11 := #t~ret256; [L4085] havoc #t~ret256; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4086] COND FALSE !(0 != ~tmp___0~11) [L4092] FCALL call #t~mem258 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4092] FCALL call #t~mem259 := read~$Pointer$({ base: #t~mem258!base, offset: 1067 + #t~mem258!offset }, 8); [L4624-L4633] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4624-L4633] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4624-L4633] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4627] havoc ~tmp~32; [L4726-L4753] ~mask := #in~mask; [L4728] havoc ~res~1; [L4729] havoc ~tmp~36; [L4730] havoc ~tmp___0~17; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4733] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4738] CALL call #t~ret421 := ldv_undef_ptr(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3621] havoc ~tmp~9; [L3624] ~tmp~9 := #t~nondet136; [L3624] havoc #t~nondet136; [L3625] #res := ~tmp~9; [L4738] RET call #t~ret421 := ldv_undef_ptr(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4738] ~tmp~36 := #t~ret421; [L4738] havoc #t~ret421; [L4739] ~res~1 := ~tmp~36; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4740] COND TRUE 0 != (~res~1!base + ~res~1!offset) % 18446744073709551616 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4686-L4694] ~ptr := #in~ptr; [L4688] havoc ~tmp~34; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4691] CALL call #t~ret419 := ldv__builtin_expect((if !!((~ptr!base + ~ptr!offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#in~c=0, #in~exp=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3655-L3662] ~exp := #in~exp; [L3655-L3662] ~c := #in~c; [L3660] #res := ~exp; [L4691] RET call #t~ret419 := ldv__builtin_expect((if !!((~ptr!base + ~ptr!offset) % 18446744073709551616 >= 18446744073709547521) then 1 else 0), 0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4691] assume -9223372036854775808 <= #t~ret419 && #t~ret419 <= 9223372036854775807; [L4691] ~tmp~34 := #t~ret419; [L4691] havoc #t~ret419; [L4692] #res := ~tmp~34; [L4745] assume -9223372036854775808 <= #t~ret422 && #t~ret422 <= 9223372036854775807; [L4745] ~tmp___0~17 := #t~ret422; [L4745] havoc #t~ret422; [L4746-L4750] COND FALSE !(0 != ~tmp___0~17) [L4749] ~ldv_blk_rq~0 := 1; [L4751] #res := ~res~1; [L4630] ~tmp~32 := #t~ret417; [L4630] havoc #t~ret417; [L4631] #res := ~tmp~32; [L4092] ~req~1 := #t~ret260; [L4092] havoc #t~mem259; [L4092] havoc #t~mem258; [L4092] havoc #t~ret260; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4093] CALL call #t~ret261 := IS_ERR(~req~1); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4615-L4623] ~ptr := #in~ptr; [L4617] havoc ~tmp~31; VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=18446744073709553690, ~ptr!offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] CALL call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4643-L4650] ~ptr := #in~ptr; [L4648] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4620] RET call #t~ret416 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709553690, #in~ptr!offset=-62, #NULL!base=0, #NULL!offset=0, #t~ret416=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ptr!base=18446744073709553690, ~ptr!offset=-62, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4620] assume -9223372036854775808 <= #t~ret416 && #t~ret416 <= 9223372036854775807; [L4620] ~tmp~31 := #t~ret416; [L4620] havoc #t~ret416; [L4621] #res := ~tmp~31; [L4093] RET call #t~ret261 := IS_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4093] assume -9223372036854775808 <= #t~ret261 && #t~ret261 <= 9223372036854775807; [L4093] ~tmp___2~1 := #t~ret261; [L4093] havoc #t~ret261; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4094] COND FALSE !(0 != ~tmp___2~1) [L4101] FCALL call write~int(7, { base: ~req~1!base, offset: 64 + ~req~1!offset }, 4); [L4102] FCALL call #t~mem263 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4102] FCALL call #t~mem264 := read~$Pointer$({ base: #t~mem263!base, offset: 1067 + #t~mem263!offset }, 8); [L4102] FCALL call #t~mem265 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4102] FCALL call #t~ret266 := blk_execute_rq(#t~mem264, #t~mem265, ~req~1, 0); [L4102] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4102] ~tmp___3~1 := #t~ret266; [L4102] havoc #t~mem263; [L4102] havoc #t~mem265; [L4102] havoc #t~mem264; [L4102] havoc #t~ret266; [L4103] #res := ~tmp___3~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4124] assume -2147483648 <= #t~ret269 && #t~ret269 <= 2147483647; [L4124] ~err~1 := #t~ret269; [L4124] havoc #t~ret269; [L4125] COND TRUE 0 == ~err~1 [L3214-L3223] ~dst := #in~dst; [L3214-L3223] ~src := #in~src; [L3214-L3223] ~size := #in~size; [L3216] havoc ~tmp~0; [L3219] FCALL call might_fault(); [L3220] FCALL call #t~ret36 := _copy_to_user(~dst, ~src, ~size); [L3220] ~tmp~0 := #t~ret36; [L3220] havoc #t~ret36; [L3221] #res := (if ~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then ~tmp~0 % 18446744073709551616 % 4294967296 else ~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4126] assume -2147483648 <= #t~ret270 && #t~ret270 <= 2147483647; [L4126] ~tmp~21 := #t~ret270; [L4126] havoc #t~ret270; [L4127] COND TRUE 0 != ~tmp~21 [L4128] ~err~1 := -14; [L4135] #res := ~err~1; [L4112] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4135] havoc ~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4565] assume -2147483648 <= #t~ret412 && #t~ret412 <= 2147483647; [L4565] havoc #t~mem411; [L4565] havoc #t~ret412; [L4566] ~ldv_state_variable_2~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4480] assume -2147483648 <= #t~nondet401 && #t~nondet401 <= 2147483647; [L4480] ~tmp___2~4 := #t~nondet401; [L4480] havoc #t~nondet401; [L4482] #t~switch402 := 0 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND FALSE !(#t~switch402) [L4516] #t~switch402 := #t~switch402 || 1 == ~tmp___2~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4481-L4589] COND TRUE #t~switch402 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4517] COND TRUE 0 != ~ldv_state_variable_0~0 [L4518] assume -2147483648 <= #t~nondet406 && #t~nondet406 <= 2147483647; [L4518] ~tmp___4~2 := #t~nondet406; [L4518] havoc #t~nondet406; [L4520] #t~switch407 := 0 == ~tmp___4~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4519-L4553] COND TRUE #t~switch407 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=3, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4521] COND TRUE 3 == ~ldv_state_variable_0~0 && 0 == ~ref_cnt~0 [L4422] FCALL call unregister_blkdev(~major~0, #t~string394); [L4423] FCALL call unregister_virtio_driver(~#virtio_blk~0); [L4523] ~ldv_state_variable_0~0 := 2; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4773] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, #Ultimate.C_memset_#ptr.base=18446744073709553690, #Ultimate.C_memset_#ptr.offset=0, #Ultimate.C_memset_#res.base=18446744073709553690, #Ultimate.C_memset_#res.offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L4776] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3643] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=26, #t~string108!offset=0, #t~string292!base=25, #t~string292!offset=0, #t~string295!base=23, #t~string295!offset=0, #t~string309!base=66, #t~string309!offset=0, #t~string312!base=21, #t~string312!offset=0, #t~string315!base=19, #t~string315!offset=0, #t~string390!base=38, #t~string390!offset=0, #t~string391!base=30, #t~string391!offset=0, #t~string394!base=29, #t~string394!offset=0, ~#__this_module~0!base=44, ~#__this_module~0!offset=39, ~#features~0!base=45, ~#features~0!offset=0, ~#id_table~0!base=46, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=17, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=13, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~ldv_retval_0~0=0, ~ldv_retval_1~0=0, ~ldv_state_variable_0~0=2, ~ldv_state_variable_1~0=1, ~ldv_state_variable_2~0=1, ~major~0=1, ~ref_cnt~0=0, ~virtblk_fops_group0~0!base=-142482651225332576681985, ~virtblk_fops_group0~0!offset=0, ~virtio_blk_group0~0!base=0, ~virtio_blk_group0~0!offset=0] [L3672] int LDV_IN_INTERRUPT = 1; [L3674] int ldv_state_variable_2 ; [L3675] int ref_cnt ; [L3676] int ldv_state_variable_1 ; [L3678] int ldv_state_variable_0 ; [L3823] static int major ; [L3824] static int index ; [L4396-L4399] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4428] int ldv_retval_0 ; [L4429] int ldv_retval_1 ; [L4695] int ldv_blk_rq = 0; [L3673] struct block_device *virtblk_fops_group0 ; [L3677] struct virtio_device *virtio_blk_group0 ; [L4177-L4178] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4394-L4395] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4400-L4401] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4427] struct virtio_device_id const __mod_virtio_device_table ; [L4454] unsigned long ldvarg1 ; [L4455] unsigned long tmp ; [L4456] fmode_t ldvarg3 ; [L4457] struct hd_geometry *ldvarg0 ; [L4458] void *tmp___0 ; [L4459] unsigned int ldvarg2 ; [L4460] unsigned int tmp___1 ; [L4461] int tmp___2 ; [L4462] int tmp___3 ; [L4463] int tmp___4 ; [L4464] int tmp___5 ; [L4467] tmp = __VERIFIER_nondet_ulong() [L4468] ldvarg1 = tmp VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4469] CALL, EXPR ldv_zalloc(16UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3594] void *p ; [L3595] void *tmp ; [L3596] int tmp___0 ; [L3599] tmp___0 = __VERIFIER_nondet_int() [L3600] COND FALSE !(tmp___0 != 0) [L3603] tmp = calloc(1UL, size) [L3604] p = tmp [L3606] return (p); [L4469] RET, EXPR ldv_zalloc(16UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4469] tmp___0 = ldv_zalloc(16UL) [L4470] ldvarg0 = (struct hd_geometry *)tmp___0 [L4471] tmp___1 = __VERIFIER_nondet_uint() [L4472] ldvarg2 = tmp___1 [L4475] ldv_state_variable_1 = 0 [L4476] ref_cnt = 0 [L4477] ldv_state_variable_0 = 1 [L4478] ldv_state_variable_2 = 0 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4480] tmp___2 = __VERIFIER_nondet_int() [L4482] case 0: [L4516] case 1: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4517] COND TRUE ldv_state_variable_0 != 0 [L4518] tmp___4 = __VERIFIER_nondet_int() [L4520] case 0: [L4529] case 1: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4530] COND TRUE ldv_state_variable_0 == 1 [L4404] int tmp ; [L4407] major = register_blkdev(0U, "virtblk") [L4408] COND FALSE !(major < 0) [L4413] tmp = register_virtio_driver(& virtio_blk) [L4414] return (tmp); [L4531] ldv_retval_1 = init() [L4532] COND TRUE ldv_retval_1 == 0 [L4533] ldv_state_variable_0 = 3 [L4534] ldv_state_variable_2 = 1 [L4444] void *tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4447] CALL, EXPR ldv_zalloc(464UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3594] void *p ; [L3595] void *tmp ; [L3596] int tmp___0 ; [L3599] tmp___0 = __VERIFIER_nondet_int() [L3600] COND FALSE !(tmp___0 != 0) [L3603] tmp = calloc(1UL, size) [L3604] p = tmp [L3606] return (p); [L4447] RET, EXPR ldv_zalloc(464UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4447] tmp = ldv_zalloc(464UL) [L4448] virtblk_fops_group0 = (struct block_device *)tmp [L4536] ldv_state_variable_1 = 1 [L4434] void *tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4437] CALL, EXPR ldv_zalloc(1048UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3594] void *p ; [L3595] void *tmp ; [L3596] int tmp___0 ; [L3599] tmp___0 = __VERIFIER_nondet_int() [L3600] COND TRUE tmp___0 != 0 [L3601] return ((void *)0); [L4437] RET, EXPR ldv_zalloc(1048UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4437] tmp = ldv_zalloc(1048UL) [L4438] virtio_blk_group0 = (struct virtio_device *)tmp VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4541] COND FALSE !(ldv_retval_1 != 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4480] tmp___2 = __VERIFIER_nondet_int() [L4482] case 0: [L4516] case 1: [L4559] case 2: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4560] COND TRUE ldv_state_variable_2 != 0 [L4561] tmp___5 = __VERIFIER_nondet_int() [L4563] case 0: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4564] COND TRUE ldv_state_variable_2 == 1 [L4565] \read(ldvarg3) [L4109] struct gendisk *disk ; [L4110] struct virtio_blk *vblk ; [L4111] void *usr_data ; [L4112] char id_str[20U] ; [L4113] int err ; [L4114] int tmp ; [L4115] bool tmp___0 ; [L4116] int tmp___1 ; [L4117] int tmp___2 ; [L4120] EXPR bdev->bd_disk [L4120] disk = bdev->bd_disk [L4121] EXPR disk->private_data [L4121] vblk = (struct virtio_blk *)disk->private_data [L4122] COND TRUE cmd == 1447184708U [L4123] usr_data = (void *)data [L4073] struct virtio_blk *vblk ; [L4074] struct request *req ; [L4075] struct bio *bio ; [L4076] long tmp ; [L4077] long tmp___0 ; [L4078] long tmp___1 ; [L4079] long tmp___2 ; [L4080] int tmp___3 ; [L4083] EXPR disk->private_data [L4083] vblk = (struct virtio_blk *)disk->private_data [L4084] EXPR vblk->disk [L4084] EXPR (vblk->disk)->queue [L4084] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L4085] CALL, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={0:0}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4617] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4620] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={0:0}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4648] return ((unsigned long )ptr > 2012UL); [L4620] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4620] tmp = ldv_is_err(ptr) [L4621] return (tmp); [L4085] RET, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4085] tmp___0 = IS_ERR((void const *)bio) [L4086] COND FALSE !(tmp___0 != 0L) [L4092] EXPR vblk->disk [L4092] EXPR (vblk->disk)->queue [L4627] struct request *tmp ; [L4728] struct request *res ; [L4729] void *tmp ; [L4730] long tmp___0 ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4733] COND TRUE ldv_blk_rq == 0 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4738] CALL, EXPR ldv_undef_ptr() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3621] void *tmp ; [L3624] tmp = __VERIFIER_nondet_pointer() [L3625] return (tmp); [L4738] RET, EXPR ldv_undef_ptr() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4738] tmp = ldv_undef_ptr() [L4739] res = (struct request *)tmp VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4740] COND TRUE (unsigned long )res != (unsigned long )((void *)0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4688] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4691] CALL, EXPR ldv__builtin_expect(! (! ((unsigned long )ptr >= 0xfffffffffffff001UL)), 0) VAL [\old(c)=0, \old(exp)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3660] return (exp); [L4691] RET, EXPR ldv__builtin_expect(! (! ((unsigned long )ptr >= 0xfffffffffffff001UL)), 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4691] tmp = ldv__builtin_expect(! (! ((unsigned long )ptr >= 0xfffffffffffff001UL)), 0) [L4692] return (tmp); [L4745] tmp___0 = IS_ERR___0(res) [L4746] COND FALSE !(\read(tmp___0)) [L4749] ldv_blk_rq = 1 [L4751] return (res); [L4630] tmp = ldv_blk_make_request(ldv_func_arg3) [L4631] return (tmp); [L4092] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L4093] CALL, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={18446744073709553690:-62}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4617] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={18446744073709553690:-62}, ptr={18446744073709553690:-62}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4620] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={18446744073709553690:-62}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4648] return ((unsigned long )ptr > 2012UL); [L4620] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={18446744073709553690:-62}, ptr={18446744073709553690:-62}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4620] tmp = ldv_is_err(ptr) [L4621] return (tmp); [L4093] RET, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4093] tmp___2 = IS_ERR((void const *)req) [L4094] COND FALSE !(tmp___2 != 0L) [L4101] req->cmd_type = 7 [L4102] EXPR vblk->disk [L4102] EXPR (vblk->disk)->queue [L4102] EXPR vblk->disk [L4102] tmp___3 = blk_execute_rq((vblk->disk)->queue, vblk->disk, req, 0) [L4103] return (tmp___3); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4124] err = virtblk_get_id(disk, (char *)(& id_str)) [L4125] COND TRUE err == 0 [L3216] unsigned long tmp ; [L3220] tmp = _copy_to_user(dst, src, size) [L3221] return ((int )tmp); [L4126] tmp = copy_to_user(usr_data, (void const *)(& id_str), 20U) [L4127] COND TRUE tmp != 0 [L4128] err = -14 [L4135] return (err); [L4135] return (err); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4566] ldv_state_variable_2 = 1 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4480] tmp___2 = __VERIFIER_nondet_int() [L4482] case 0: [L4516] case 1: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4517] COND TRUE ldv_state_variable_0 != 0 [L4518] tmp___4 = __VERIFIER_nondet_int() [L4520] case 0: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4521] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L4523] ldv_state_variable_0 = 2 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4773] COND FALSE !(ldv_blk_rq == 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4776] CALL ldv_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3643] __VERIFIER_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] ----- [2018-11-23 03:02:47,011 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck CFG 23.11 03:02:47 ImpRootNode [2018-11-23 03:02:47,011 INFO L132 PluginConnector]: ------------------------ END CodeCheck---------------------------- [2018-11-23 03:02:47,011 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 03:02:47,011 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 03:02:47,011 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 03:02:47,012 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:02:18" (3/4) ... [2018-11-23 03:02:47,016 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 03:02:47,016 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 03:02:47,016 INFO L168 Benchmark]: Toolchain (without parser) took 32499.47 ms. Allocated memory was 1.0 GB in the beginning and 2.0 GB in the end (delta: 923.3 MB). Free memory was 954.8 MB in the beginning and 1.2 GB in the end (delta: -246.7 MB). Peak memory consumption was 676.6 MB. Max. memory is 11.5 GB. [2018-11-23 03:02:47,018 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 03:02:47,018 INFO L168 Benchmark]: CACSL2BoogieTranslator took 915.30 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 176.7 MB). Free memory was 954.8 MB in the beginning and 1.1 GB in the end (delta: -125.0 MB). Peak memory consumption was 72.6 MB. Max. memory is 11.5 GB. [2018-11-23 03:02:47,018 INFO L168 Benchmark]: Boogie Procedure Inliner took 88.45 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.2 MB). Peak memory consumption was 10.2 MB. Max. memory is 11.5 GB. [2018-11-23 03:02:47,019 INFO L168 Benchmark]: Boogie Preprocessor took 82.25 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.2 MB). Peak memory consumption was 10.2 MB. Max. memory is 11.5 GB. [2018-11-23 03:02:47,019 INFO L168 Benchmark]: RCFGBuilder took 2726.30 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 94.9 MB). Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 46.6 MB). Peak memory consumption was 247.8 MB. Max. memory is 11.5 GB. [2018-11-23 03:02:47,020 INFO L168 Benchmark]: CodeCheck took 28679.71 ms. Allocated memory was 1.3 GB in the beginning and 2.0 GB in the end (delta: 651.7 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -188.7 MB). Peak memory consumption was 463.0 MB. Max. memory is 11.5 GB. [2018-11-23 03:02:47,020 INFO L168 Benchmark]: Witness Printer took 4.56 ms. Allocated memory is still 2.0 GB. Free memory is still 1.2 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 03:02:47,052 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - StatisticsResult: Ultimate CodeCheck benchmark data CFG has 21 procedures, 397 locations, 1 error locations. UNSAFE Result, 24.1s OverallTime, 120 OverallIterations, 0 TraceHistogramMax, 0.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 35939344 SDtfs, -66813888 SDslu, 387153664 SDs, 0 SdLazy, 210756184 SolverSat, 35865256 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 94.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 63105 GetRequests, 62182 SyntacticMatches, 481 SemanticMatches, 442 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 116312 ImplicationChecksByTransitivity, 17.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=-1occurred in iteration=-1, traceCheckStatistics: 0.2s SsaConstructionTime, 1.2s SatisfiabilityAnalysisTime, 2.6s InterpolantComputationTime, 5696 NumberOfCodeBlocks, 5696 NumberOfCodeBlocksAsserted, 120 NumberOfCheckSat, 5502 ConstructedInterpolants, 0 QuantifiedInterpolants, 530074 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 119 InterpolantComputations, 94 PerfectInterpolantSequences, 3645/3812 InterpolantCoveringCapability, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: No data available, ReuseStatistics: No data available - UnprovableResult [Line: 3643]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 4407. Possible FailurePath: [L3672] int LDV_IN_INTERRUPT = 1; [L3674] int ldv_state_variable_2 ; [L3675] int ref_cnt ; [L3676] int ldv_state_variable_1 ; [L3678] int ldv_state_variable_0 ; [L3823] static int major ; [L3824] static int index ; [L4396-L4399] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4428] int ldv_retval_0 ; [L4429] int ldv_retval_1 ; [L4695] int ldv_blk_rq = 0; [L3673] struct block_device *virtblk_fops_group0 ; [L3677] struct virtio_device *virtio_blk_group0 ; [L4177-L4178] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4394-L4395] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4400-L4401] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4427] struct virtio_device_id const __mod_virtio_device_table ; [L4454] unsigned long ldvarg1 ; [L4455] unsigned long tmp ; [L4456] fmode_t ldvarg3 ; [L4457] struct hd_geometry *ldvarg0 ; [L4458] void *tmp___0 ; [L4459] unsigned int ldvarg2 ; [L4460] unsigned int tmp___1 ; [L4461] int tmp___2 ; [L4462] int tmp___3 ; [L4463] int tmp___4 ; [L4464] int tmp___5 ; [L4467] tmp = __VERIFIER_nondet_ulong() [L4468] ldvarg1 = tmp VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4469] CALL, EXPR ldv_zalloc(16UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3594] void *p ; [L3595] void *tmp ; [L3596] int tmp___0 ; [L3599] tmp___0 = __VERIFIER_nondet_int() [L3600] COND FALSE !(tmp___0 != 0) [L3603] tmp = calloc(1UL, size) [L3604] p = tmp [L3606] return (p); [L4469] RET, EXPR ldv_zalloc(16UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4469] tmp___0 = ldv_zalloc(16UL) [L4470] ldvarg0 = (struct hd_geometry *)tmp___0 [L4471] tmp___1 = __VERIFIER_nondet_uint() [L4472] ldvarg2 = tmp___1 [L4475] ldv_state_variable_1 = 0 [L4476] ref_cnt = 0 [L4477] ldv_state_variable_0 = 1 [L4478] ldv_state_variable_2 = 0 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4480] tmp___2 = __VERIFIER_nondet_int() [L4482] case 0: [L4516] case 1: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4517] COND TRUE ldv_state_variable_0 != 0 [L4518] tmp___4 = __VERIFIER_nondet_int() [L4520] case 0: [L4529] case 1: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, major=0, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4530] COND TRUE ldv_state_variable_0 == 1 [L4404] int tmp ; [L4407] major = register_blkdev(0U, "virtblk") [L4408] COND FALSE !(major < 0) [L4413] tmp = register_virtio_driver(& virtio_blk) [L4414] return (tmp); [L4531] ldv_retval_1 = init() [L4532] COND TRUE ldv_retval_1 == 0 [L4533] ldv_state_variable_0 = 3 [L4534] ldv_state_variable_2 = 1 [L4444] void *tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4447] CALL, EXPR ldv_zalloc(464UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3594] void *p ; [L3595] void *tmp ; [L3596] int tmp___0 ; [L3599] tmp___0 = __VERIFIER_nondet_int() [L3600] COND FALSE !(tmp___0 != 0) [L3603] tmp = calloc(1UL, size) [L3604] p = tmp [L3606] return (p); [L4447] RET, EXPR ldv_zalloc(464UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={0:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4447] tmp = ldv_zalloc(464UL) [L4448] virtblk_fops_group0 = (struct block_device *)tmp [L4536] ldv_state_variable_1 = 1 [L4434] void *tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4437] CALL, EXPR ldv_zalloc(1048UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3594] void *p ; [L3595] void *tmp ; [L3596] int tmp___0 ; [L3599] tmp___0 = __VERIFIER_nondet_int() [L3600] COND TRUE tmp___0 != 0 [L3601] return ((void *)0); [L4437] RET, EXPR ldv_zalloc(1048UL) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4437] tmp = ldv_zalloc(1048UL) [L4438] virtio_blk_group0 = (struct virtio_device *)tmp VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4541] COND FALSE !(ldv_retval_1 != 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4480] tmp___2 = __VERIFIER_nondet_int() [L4482] case 0: [L4516] case 1: [L4559] case 2: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4560] COND TRUE ldv_state_variable_2 != 0 [L4561] tmp___5 = __VERIFIER_nondet_int() [L4563] case 0: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4564] COND TRUE ldv_state_variable_2 == 1 [L4565] \read(ldvarg3) [L4109] struct gendisk *disk ; [L4110] struct virtio_blk *vblk ; [L4111] void *usr_data ; [L4112] char id_str[20U] ; [L4113] int err ; [L4114] int tmp ; [L4115] bool tmp___0 ; [L4116] int tmp___1 ; [L4117] int tmp___2 ; [L4120] EXPR bdev->bd_disk [L4120] disk = bdev->bd_disk [L4121] EXPR disk->private_data [L4121] vblk = (struct virtio_blk *)disk->private_data [L4122] COND TRUE cmd == 1447184708U [L4123] usr_data = (void *)data [L4073] struct virtio_blk *vblk ; [L4074] struct request *req ; [L4075] struct bio *bio ; [L4076] long tmp ; [L4077] long tmp___0 ; [L4078] long tmp___1 ; [L4079] long tmp___2 ; [L4080] int tmp___3 ; [L4083] EXPR disk->private_data [L4083] vblk = (struct virtio_blk *)disk->private_data [L4084] EXPR vblk->disk [L4084] EXPR (vblk->disk)->queue [L4084] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L4085] CALL, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={0:0}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4617] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4620] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={0:0}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4648] return ((unsigned long )ptr > 2012UL); [L4620] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4620] tmp = ldv_is_err(ptr) [L4621] return (tmp); [L4085] RET, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4085] tmp___0 = IS_ERR((void const *)bio) [L4086] COND FALSE !(tmp___0 != 0L) [L4092] EXPR vblk->disk [L4092] EXPR (vblk->disk)->queue [L4627] struct request *tmp ; [L4728] struct request *res ; [L4729] void *tmp ; [L4730] long tmp___0 ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4733] COND TRUE ldv_blk_rq == 0 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4738] CALL, EXPR ldv_undef_ptr() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3621] void *tmp ; [L3624] tmp = __VERIFIER_nondet_pointer() [L3625] return (tmp); [L4738] RET, EXPR ldv_undef_ptr() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4738] tmp = ldv_undef_ptr() [L4739] res = (struct request *)tmp VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4740] COND TRUE (unsigned long )res != (unsigned long )((void *)0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4688] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4691] CALL, EXPR ldv__builtin_expect(! (! ((unsigned long )ptr >= 0xfffffffffffff001UL)), 0) VAL [\old(c)=0, \old(exp)=0, __mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3660] return (exp); [L4691] RET, EXPR ldv__builtin_expect(! (! ((unsigned long )ptr >= 0xfffffffffffff001UL)), 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4691] tmp = ldv__builtin_expect(! (! ((unsigned long )ptr >= 0xfffffffffffff001UL)), 0) [L4692] return (tmp); [L4745] tmp___0 = IS_ERR___0(res) [L4746] COND FALSE !(\read(tmp___0)) [L4749] ldv_blk_rq = 1 [L4751] return (res); [L4630] tmp = ldv_blk_make_request(ldv_func_arg3) [L4631] return (tmp); [L4092] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L4093] CALL, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={18446744073709553690:-62}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4617] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={18446744073709553690:-62}, ptr={18446744073709553690:-62}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4620] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={18446744073709553690:-62}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4648] return ((unsigned long )ptr > 2012UL); [L4620] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ptr={18446744073709553690:-62}, ptr={18446744073709553690:-62}, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4620] tmp = ldv_is_err(ptr) [L4621] return (tmp); [L4093] RET, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4093] tmp___2 = IS_ERR((void const *)req) [L4094] COND FALSE !(tmp___2 != 0L) [L4101] req->cmd_type = 7 [L4102] EXPR vblk->disk [L4102] EXPR (vblk->disk)->queue [L4102] EXPR vblk->disk [L4102] tmp___3 = blk_execute_rq((vblk->disk)->queue, vblk->disk, req, 0) [L4103] return (tmp___3); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4124] err = virtblk_get_id(disk, (char *)(& id_str)) [L4125] COND TRUE err == 0 [L3216] unsigned long tmp ; [L3220] tmp = _copy_to_user(dst, src, size) [L3221] return ((int )tmp); [L4126] tmp = copy_to_user(usr_data, (void const *)(& id_str), 20U) [L4127] COND TRUE tmp != 0 [L4128] err = -14 [L4135] return (err); [L4135] return (err); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4566] ldv_state_variable_2 = 1 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4480] tmp___2 = __VERIFIER_nondet_int() [L4482] case 0: [L4516] case 1: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4517] COND TRUE ldv_state_variable_0 != 0 [L4518] tmp___4 = __VERIFIER_nondet_int() [L4520] case 0: VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4521] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L4523] ldv_state_variable_0 = 2 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4773] COND FALSE !(ldv_blk_rq == 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L4776] CALL ldv_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] [L3643] __VERIFIER_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={44:39}, features={45:0}, id_table={46:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, major=1, ref_cnt=0, virtblk_fops={17:0}, virtblk_fops_group0={-142482651225332576681985:0}, virtio_blk={13:0}, virtio_blk_group0={0:0}] * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 915.30 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 176.7 MB). Free memory was 954.8 MB in the beginning and 1.1 GB in the end (delta: -125.0 MB). Peak memory consumption was 72.6 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 88.45 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.2 MB). Peak memory consumption was 10.2 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 82.25 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.2 MB). Peak memory consumption was 10.2 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2726.30 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 94.9 MB). Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 46.6 MB). Peak memory consumption was 247.8 MB. Max. memory is 11.5 GB. * CodeCheck took 28679.71 ms. Allocated memory was 1.3 GB in the beginning and 2.0 GB in the end (delta: 651.7 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -188.7 MB). Peak memory consumption was 463.0 MB. Max. memory is 11.5 GB. * Witness Printer took 4.56 ms. Allocated memory is still 2.0 GB. Free memory is still 1.2 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 03:02:50,613 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 03:02:50,615 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 03:02:50,624 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 03:02:50,624 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 03:02:50,625 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 03:02:50,625 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 03:02:50,627 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 03:02:50,628 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 03:02:50,628 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 03:02:50,629 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 03:02:50,629 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 03:02:50,630 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 03:02:50,631 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 03:02:50,631 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 03:02:50,632 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 03:02:50,632 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 03:02:50,634 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 03:02:50,635 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 03:02:50,636 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 03:02:50,637 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 03:02:50,637 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 03:02:50,639 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 03:02:50,639 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 03:02:50,639 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 03:02:50,640 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 03:02:50,641 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 03:02:50,641 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 03:02:50,642 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 03:02:50,643 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 03:02:50,643 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 03:02:50,643 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 03:02:50,643 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 03:02:50,644 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 03:02:50,644 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 03:02:50,645 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 03:02:50,645 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf [2018-11-23 03:02:50,655 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 03:02:50,655 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 03:02:50,656 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 03:02:50,656 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 03:02:50,657 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 03:02:50,657 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 03:02:50,657 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 03:02:50,657 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 03:02:50,657 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 03:02:50,658 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 03:02:50,658 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 03:02:50,658 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 03:02:50,658 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 03:02:50,658 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 03:02:50,658 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 03:02:50,658 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 03:02:50,658 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 03:02:50,659 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 03:02:50,659 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 03:02:50,659 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 03:02:50,659 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 03:02:50,659 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 03:02:50,659 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 03:02:50,660 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 03:02:50,660 INFO L133 SettingsManager]: * Use separate solver for trace checks=false [2018-11-23 03:02:50,660 INFO L133 SettingsManager]: * Trace refinement strategy=WALRUS [2018-11-23 03:02:50,660 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 03:02:50,660 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 03:02:50,660 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 03:02:50,660 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 03:02:50,660 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3febb4cad10e1dcca564dc92c54e35aa9ecdd9b7 [2018-11-23 03:02:50,691 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 03:02:50,700 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 03:02:50,703 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 03:02:50,704 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 03:02:50,704 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 03:02:50,704 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-39a1d13-1-101_1a-drivers--block--virtio_blk.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 03:02:50,747 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data/088353093/e2e43570210a4c75a88e0e2b85b88f72/FLAG9bf360a94 [2018-11-23 03:02:51,182 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 03:02:51,183 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-39a1d13-1-101_1a-drivers--block--virtio_blk.ko-entry_point_false-unreach-call.cil.out.c [2018-11-23 03:02:51,201 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data/088353093/e2e43570210a4c75a88e0e2b85b88f72/FLAG9bf360a94 [2018-11-23 03:02:51,213 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/data/088353093/e2e43570210a4c75a88e0e2b85b88f72 [2018-11-23 03:02:51,215 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 03:02:51,216 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 03:02:51,217 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 03:02:51,217 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 03:02:51,220 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 03:02:51,221 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:02:51" (1/1) ... [2018-11-23 03:02:51,223 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3603b398 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:51, skipping insertion in model container [2018-11-23 03:02:51,223 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:02:51" (1/1) ... [2018-11-23 03:02:51,230 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 03:02:51,289 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 03:02:52,017 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 03:02:52,119 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 03:02:52,294 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 03:02:52,370 INFO L195 MainTranslator]: Completed translation [2018-11-23 03:02:52,370 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52 WrapperNode [2018-11-23 03:02:52,370 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 03:02:52,371 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 03:02:52,371 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 03:02:52,371 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 03:02:52,378 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... [2018-11-23 03:02:52,402 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... [2018-11-23 03:02:52,447 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 03:02:52,448 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 03:02:52,448 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 03:02:52,448 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 03:02:52,456 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... [2018-11-23 03:02:52,456 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... [2018-11-23 03:02:52,463 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... [2018-11-23 03:02:52,464 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... [2018-11-23 03:02:52,494 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... [2018-11-23 03:02:52,501 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... [2018-11-23 03:02:52,509 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... [2018-11-23 03:02:52,518 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 03:02:52,518 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 03:02:52,519 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 03:02:52,519 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 03:02:52,519 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:02:52" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4ec13326-6a38-4d4a-ba57-67ac0846da85/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 03:02:52,559 INFO L130 BoogieDeclarations]: Found specification of procedure virtqueue_add_buf_gfp [2018-11-23 03:02:52,560 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2018-11-23 03:02:52,560 INFO L130 BoogieDeclarations]: Found specification of procedure blk_stop_queue [2018-11-23 03:02:52,560 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_max_segment_size [2018-11-23 03:02:52,560 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2018-11-23 03:02:52,560 INFO L130 BoogieDeclarations]: Found specification of procedure scsi_cmd_ioctl [2018-11-23 03:02:52,560 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2018-11-23 03:02:52,560 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 03:02:52,560 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-23 03:02:52,560 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_config_buf [2018-11-23 03:02:52,561 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_config_buf [2018-11-23 03:02:52,561 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2018-11-23 03:02:52,561 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2018-11-23 03:02:52,561 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2018-11-23 03:02:52,561 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 03:02:52,561 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2018-11-23 03:02:52,561 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_UINT~X~$Pointer$~X~C_UINT~TO~VOID [2018-11-23 03:02:52,561 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_UINT~X~$Pointer$~X~C_UINT~TO~VOID [2018-11-23 03:02:52,561 INFO L130 BoogieDeclarations]: Found specification of procedure req_get_ioprio [2018-11-23 03:02:52,561 INFO L138 BoogieDeclarations]: Found implementation of procedure req_get_ioprio [2018-11-23 03:02:52,562 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2018-11-23 03:02:52,562 INFO L130 BoogieDeclarations]: Found specification of procedure __get_free_pages [2018-11-23 03:02:52,562 INFO L130 BoogieDeclarations]: Found specification of procedure add_disk [2018-11-23 03:02:52,562 INFO L130 BoogieDeclarations]: Found specification of procedure mempool_free [2018-11-23 03:02:52,562 INFO L130 BoogieDeclarations]: Found specification of procedure sg_set_buf [2018-11-23 03:02:52,562 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_set_buf [2018-11-23 03:02:52,562 INFO L130 BoogieDeclarations]: Found specification of procedure blk_start_queue [2018-11-23 03:02:52,562 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 03:02:52,563 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_blkdev [2018-11-23 03:02:52,563 INFO L130 BoogieDeclarations]: Found specification of procedure del_gendisk [2018-11-23 03:02:52,563 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_alignment_offset [2018-11-23 03:02:52,563 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 03:02:52,563 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 03:02:52,563 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 03:02:52,563 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 03:02:52,563 INFO L130 BoogieDeclarations]: Found specification of procedure index_to_minor [2018-11-23 03:02:52,564 INFO L138 BoogieDeclarations]: Found implementation of procedure index_to_minor [2018-11-23 03:02:52,564 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_io_min [2018-11-23 03:02:52,564 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_check_driver_offered_feature [2018-11-23 03:02:52,564 INFO L130 BoogieDeclarations]: Found specification of procedure blk_rq_map_sg [2018-11-23 03:02:52,564 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2018-11-23 03:02:52,564 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2018-11-23 03:02:52,564 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2018-11-23 03:02:52,565 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2018-11-23 03:02:52,565 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2018-11-23 03:02:52,565 INFO L130 BoogieDeclarations]: Found specification of procedure blk_start_request [2018-11-23 03:02:52,565 INFO L130 BoogieDeclarations]: Found specification of procedure __list_add [2018-11-23 03:02:52,565 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_io_opt [2018-11-23 03:02:52,565 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_has_feature [2018-11-23 03:02:52,565 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_has_feature [2018-11-23 03:02:52,565 INFO L130 BoogieDeclarations]: Found specification of procedure virtqueue_get_buf [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ptr [2018-11-23 03:02:52,566 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ptr [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure blk_cleanup_queue [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure __blk_end_request_all [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_bounce_limit [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure mempool_alloc [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_virtio_driver [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure virtqueue_kick [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure blk_execute_rq [2018-11-23 03:02:52,566 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2018-11-23 03:02:52,567 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2018-11-23 03:02:52,567 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2018-11-23 03:02:52,567 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_unlock_irqrestore [2018-11-23 03:02:52,567 INFO L130 BoogieDeclarations]: Found specification of procedure virtblk_remove [2018-11-23 03:02:52,567 INFO L138 BoogieDeclarations]: Found implementation of procedure virtblk_remove [2018-11-23 03:02:52,567 INFO L130 BoogieDeclarations]: Found specification of procedure mempool_destroy [2018-11-23 03:02:52,567 INFO L130 BoogieDeclarations]: Found specification of procedure mempool_create [2018-11-23 03:02:52,567 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 03:02:52,567 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2018-11-23 03:02:52,567 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2018-11-23 03:02:52,567 INFO L130 BoogieDeclarations]: Found specification of procedure register_virtio_driver [2018-11-23 03:02:52,568 INFO L130 BoogieDeclarations]: Found specification of procedure set_disk_ro [2018-11-23 03:02:52,568 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_logical_block_size [2018-11-23 03:02:52,568 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 03:02:52,568 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 03:02:52,568 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 03:02:52,568 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 03:02:52,568 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_max_segments [2018-11-23 03:02:52,568 INFO L130 BoogieDeclarations]: Found specification of procedure alloc_disk [2018-11-23 03:02:52,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2018-11-23 03:02:52,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2018-11-23 03:02:52,568 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_physical_block_size [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure sg_init_table [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure bio_put [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure bio_map_kern [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2018-11-23 03:02:52,569 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2018-11-23 03:02:52,569 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure blk_init_queue [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure register_blkdev [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure put_disk [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure blk_peek_request [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_ordered [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_dereference [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure blk_queue_max_hw_sectors [2018-11-23 03:02:52,570 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2018-11-23 03:02:52,571 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2018-11-23 03:02:52,571 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 03:02:52,571 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 03:02:52,571 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 03:02:52,571 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 03:03:47,992 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 03:03:47,992 INFO L280 CfgBuilder]: Removed 96 assue(true) statements. [2018-11-23 03:03:47,992 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:03:47 BoogieIcfgContainer [2018-11-23 03:03:47,993 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 03:03:47,993 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-23 03:03:47,993 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-23 03:03:47,999 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-23 03:03:48,000 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:03:47" (1/1) ... [2018-11-23 03:03:48,006 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 03:03:48,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 03:03:48,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 360 states to 256 states and 360 transitions. [2018-11-23 03:03:48,034 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 360 transitions. [2018-11-23 03:03:48,037 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2018-11-23 03:03:48,037 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 03:03:48,070 FATAL L292 ToolchainWalker]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck has thrown an exception: java.lang.IllegalArgumentException: Indexed Sort BitVec undefined at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.getSort(SortSymbol.java:177) at de.uni_freiburg.informatik.ultimate.logic.Theory.getSort(Theory.java:1243) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.sort(NoopScript.java:287) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.transferSort(TermTransferrer.java:128) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.convertApplicationTerm(TermTransferrer.java:162) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer$BuildApplicationTerm.walk(TermTransformer.java:320) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:122) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:113) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer.transform(TermTransformer.java:253) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.cfg.SmtSymbols.transferSymbols(SmtSymbols.java:129) at de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck.CodeCheckObserver.process(CodeCheckObserver.java:449) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.CFGWalker.runObserver(CFGWalker.java:57) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.runObserver(BaseWalker.java:93) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.run(BaseWalker.java:86) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:167) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:316) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2018-11-23 03:03:48,073 INFO L168 Benchmark]: Toolchain (without parser) took 56857.22 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 234.4 MB). Free memory was 943.3 MB in the beginning and 982.2 MB in the end (delta: -38.9 MB). Peak memory consumption was 195.4 MB. Max. memory is 11.5 GB. [2018-11-23 03:03:48,074 INFO L168 Benchmark]: CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 03:03:48,074 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1153.61 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 154.1 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -121.1 MB). Peak memory consumption was 102.9 MB. Max. memory is 11.5 GB. [2018-11-23 03:03:48,075 INFO L168 Benchmark]: Boogie Procedure Inliner took 76.76 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.8 MB). Peak memory consumption was 10.8 MB. Max. memory is 11.5 GB. [2018-11-23 03:03:48,076 INFO L168 Benchmark]: Boogie Preprocessor took 70.36 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 10.8 MB). Peak memory consumption was 10.8 MB. Max. memory is 11.5 GB. [2018-11-23 03:03:48,077 INFO L168 Benchmark]: RCFGBuilder took 55474.21 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 80.2 MB). Free memory was 1.0 GB in the beginning and 989.4 MB in the end (delta: 53.4 MB). Peak memory consumption was 263.1 MB. Max. memory is 11.5 GB. [2018-11-23 03:03:48,077 INFO L168 Benchmark]: CodeCheck took 79.23 ms. Allocated memory is still 1.3 GB. Free memory was 989.4 MB in the beginning and 982.2 MB in the end (delta: 7.1 MB). Peak memory consumption was 7.1 MB. Max. memory is 11.5 GB. [2018-11-23 03:03:48,080 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: IllegalArgumentException: Indexed Sort BitVec undefined: de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1153.61 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 154.1 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -121.1 MB). Peak memory consumption was 102.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 76.76 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 10.8 MB). Peak memory consumption was 10.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 70.36 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 10.8 MB). Peak memory consumption was 10.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 55474.21 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 80.2 MB). Free memory was 1.0 GB in the beginning and 989.4 MB in the end (delta: 53.4 MB). Peak memory consumption was 263.1 MB. Max. memory is 11.5 GB. * CodeCheck took 79.23 ms. Allocated memory is still 1.3 GB. Free memory was 989.4 MB in the beginning and 982.2 MB in the end (delta: 7.1 MB). Peak memory consumption was 7.1 MB. Max. memory is 11.5 GB. RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...