./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c -s /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f9b269fee929c2a3187ed7c2821bda9ec7cbeaea .......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c -s /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f9b269fee929c2a3187ed7c2821bda9ec7cbeaea ........................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 13:22:48,710 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 13:22:48,711 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 13:22:48,718 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 13:22:48,718 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 13:22:48,719 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 13:22:48,719 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 13:22:48,720 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 13:22:48,721 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 13:22:48,722 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 13:22:48,723 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 13:22:48,723 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 13:22:48,723 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 13:22:48,724 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 13:22:48,725 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 13:22:48,725 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 13:22:48,726 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 13:22:48,727 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 13:22:48,728 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 13:22:48,729 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 13:22:48,730 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 13:22:48,731 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 13:22:48,732 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 13:22:48,733 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 13:22:48,733 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 13:22:48,733 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 13:22:48,734 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 13:22:48,735 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 13:22:48,735 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 13:22:48,736 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 13:22:48,736 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 13:22:48,737 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 13:22:48,737 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 13:22:48,737 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 13:22:48,738 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 13:22:48,738 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 13:22:48,738 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf [2018-11-23 13:22:48,749 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 13:22:48,749 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 13:22:48,749 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 13:22:48,750 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 13:22:48,750 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 13:22:48,750 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 13:22:48,750 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 13:22:48,751 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 13:22:48,751 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 13:22:48,751 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 13:22:48,751 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 13:22:48,751 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 13:22:48,751 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 13:22:48,751 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 13:22:48,752 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 13:22:48,752 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 13:22:48,752 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 13:22:48,752 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 13:22:48,752 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 13:22:48,752 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 13:22:48,752 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 13:22:48,753 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 13:22:48,753 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 13:22:48,753 INFO L133 SettingsManager]: * Trace refinement strategy=PENGUIN [2018-11-23 13:22:48,753 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 13:22:48,753 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 13:22:48,753 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 13:22:48,753 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f9b269fee929c2a3187ed7c2821bda9ec7cbeaea [2018-11-23 13:22:48,780 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 13:22:48,789 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 13:22:48,791 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 13:22:48,792 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 13:22:48,793 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 13:22:48,793 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 13:22:48,839 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data/a7f8f58aa/7726eecce8b84ecbad83ff3c04f4e546/FLAG8ded1bf54 [2018-11-23 13:22:49,311 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 13:22:49,312 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 13:22:49,329 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data/a7f8f58aa/7726eecce8b84ecbad83ff3c04f4e546/FLAG8ded1bf54 [2018-11-23 13:22:49,340 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data/a7f8f58aa/7726eecce8b84ecbad83ff3c04f4e546 [2018-11-23 13:22:49,343 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 13:22:49,344 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 13:22:49,345 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 13:22:49,345 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 13:22:49,348 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 13:22:49,349 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:22:49" (1/1) ... [2018-11-23 13:22:49,351 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7e93d0a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:49, skipping insertion in model container [2018-11-23 13:22:49,351 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:22:49" (1/1) ... [2018-11-23 13:22:49,359 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 13:22:49,419 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 13:22:50,109 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:22:50,118 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 13:22:50,263 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:22:50,315 INFO L195 MainTranslator]: Completed translation [2018-11-23 13:22:50,315 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50 WrapperNode [2018-11-23 13:22:50,315 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 13:22:50,316 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 13:22:50,316 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 13:22:50,316 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 13:22:50,323 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... [2018-11-23 13:22:50,347 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... [2018-11-23 13:22:50,374 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 13:22:50,374 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 13:22:50,374 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 13:22:50,374 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 13:22:50,382 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... [2018-11-23 13:22:50,382 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... [2018-11-23 13:22:50,387 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... [2018-11-23 13:22:50,387 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... [2018-11-23 13:22:50,400 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... [2018-11-23 13:22:50,403 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... [2018-11-23 13:22:50,406 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... [2018-11-23 13:22:50,410 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 13:22:50,410 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 13:22:50,411 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 13:22:50,411 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 13:22:50,411 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:50" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 13:22:50,457 INFO L130 BoogieDeclarations]: Found specification of procedure scsi_cmd_ioctl [2018-11-23 13:22:50,457 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 13:22:50,457 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_config_buf [2018-11-23 13:22:50,457 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_config_buf [2018-11-23 13:22:50,457 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 13:22:50,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 13:22:50,458 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-23 13:22:50,458 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-23 13:22:50,458 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_blkdev [2018-11-23 13:22:50,458 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 13:22:50,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 13:22:50,458 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 13:22:50,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 13:22:50,458 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 13:22:50,459 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_check_driver_offered_feature [2018-11-23 13:22:50,459 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_has_feature [2018-11-23 13:22:50,459 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_has_feature [2018-11-23 13:22:50,459 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_virtio_driver [2018-11-23 13:22:50,459 INFO L130 BoogieDeclarations]: Found specification of procedure blk_execute_rq [2018-11-23 13:22:50,459 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2018-11-23 13:22:50,459 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 13:22:50,459 INFO L130 BoogieDeclarations]: Found specification of procedure register_virtio_driver [2018-11-23 13:22:50,459 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 13:22:50,459 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 13:22:50,460 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure bio_put [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure bio_map_kern [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure blk_make_request [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure register_blkdev [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 13:22:50,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2018-11-23 13:22:50,461 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 13:22:50,461 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 13:22:50,461 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 13:22:50,461 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 13:22:51,450 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 13:22:51,450 INFO L280 CfgBuilder]: Removed 30 assue(true) statements. [2018-11-23 13:22:51,450 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:22:51 BoogieIcfgContainer [2018-11-23 13:22:51,450 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 13:22:51,451 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-23 13:22:51,451 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-23 13:22:51,457 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-23 13:22:51,457 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:22:51" (1/1) ... [2018-11-23 13:22:51,465 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:22:51,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:22:51,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 59 states and 74 transitions. [2018-11-23 13:22:51,493 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 74 transitions. [2018-11-23 13:22:51,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2018-11-23 13:22:51,497 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:22:51,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:22:51,664 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:22:51,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:22:51,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 59 states and 72 transitions. [2018-11-23 13:22:51,704 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 72 transitions. [2018-11-23 13:22:51,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2018-11-23 13:22:51,705 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:22:51,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:22:51,755 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:22:51,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:22:51,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 61 states and 77 transitions. [2018-11-23 13:22:51,760 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 77 transitions. [2018-11-23 13:22:51,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2018-11-23 13:22:51,761 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:22:51,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:22:51,799 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:22:51,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:22:51,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 63 states and 80 transitions. [2018-11-23 13:22:51,804 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 80 transitions. [2018-11-23 13:22:51,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2018-11-23 13:22:51,805 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:22:51,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:22:51,847 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:22:51,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:22:51,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 67 states and 86 transitions. [2018-11-23 13:22:51,861 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 86 transitions. [2018-11-23 13:22:51,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2018-11-23 13:22:51,862 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:22:51,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:22:51,893 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:22:51,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:22:51,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 71 states and 91 transitions. [2018-11-23 13:22:51,912 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 91 transitions. [2018-11-23 13:22:51,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2018-11-23 13:22:51,912 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:22:51,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:22:51,942 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:22:51,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:22:51,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 73 states and 93 transitions. [2018-11-23 13:22:51,951 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 93 transitions. [2018-11-23 13:22:51,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2018-11-23 13:22:51,952 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:22:51,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:22:51,992 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 13:22:52,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:22:52,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 76 states and 98 transitions. [2018-11-23 13:22:52,004 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2018-11-23 13:22:52,005 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2018-11-23 13:22:52,005 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:22:52,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:22:52,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:22:52,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:22:52,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:22:52,327 WARN L493 CodeCheckObserver]: This program is UNSAFE, Check terminated with 8 iterations. ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28);call #t~string289.base, #t~string289.offset := #Ultimate.alloc(22);call #t~string292.base, #t~string292.offset := #Ultimate.alloc(9);call #t~string306.base, #t~string306.offset := #Ultimate.alloc(5);call write~init~int(118, #t~string306.base, #t~string306.offset, 1);call write~init~int(100, #t~string306.base, 1 + #t~string306.offset, 1);call write~init~int(37, #t~string306.base, 2 + #t~string306.offset, 1);call write~init~int(99, #t~string306.base, 3 + #t~string306.offset, 1);call write~init~int(0, #t~string306.base, 4 + #t~string306.offset, 1);call #t~string309.base, #t~string309.offset := #Ultimate.alloc(7);call write~init~int(118, #t~string309.base, #t~string309.offset, 1);call write~init~int(100, #t~string309.base, 1 + #t~string309.offset, 1);call write~init~int(37, #t~string309.base, 2 + #t~string309.offset, 1);call write~init~int(99, #t~string309.base, 3 + #t~string309.offset, 1);call write~init~int(37, #t~string309.base, 4 + #t~string309.offset, 1);call write~init~int(99, #t~string309.base, 5 + #t~string309.offset, 1);call write~init~int(0, #t~string309.base, 6 + #t~string309.offset, 1);call #t~string312.base, #t~string312.offset := #Ultimate.alloc(9);call #t~string387.base, #t~string387.offset := #Ultimate.alloc(11);call #t~string388.base, #t~string388.offset := #Ultimate.alloc(8);call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8);~major~0 := 0;~index~0 := 0;call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36);call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4);call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4);call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4);call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4);call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4);call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4);call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4);call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4);call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4);~LDV_IN_INTERRUPT~0 := 0;~ldv_blk_rq~0 := 0;call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8);call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16);call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4);call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4);call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4);call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4);call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141);call write~init~$Pointer$(#t~string387.base, #t~string387.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8);call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8);call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4);call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8);~__mod_virtio_device_table~0.device := 0;~__mod_virtio_device_table~0.vendor := 0;havoc main_#res;havoc main_#t~ret392, main_#t~nondet393, main_#t~switch394, main_#t~ret395, main_#t~ret396, main_#t~nondet397, main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0.base, main_~var_group2~0.offset, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8;havoc main_~var_group1~0.base, main_~var_group1~0.offset;havoc main_~var_virtblk_ioctl_5_p1~0;havoc main_~var_virtblk_ioctl_5_p2~0;havoc main_~var_virtblk_ioctl_5_p3~0;havoc main_~var_group2~0.base, main_~var_group2~0.offset;havoc main_~tmp~21;havoc main_~tmp___0~13;havoc main_~tmp___1~8;~LDV_IN_INTERRUPT~0 := 1;call ldv_initialize();call ldv_handler_precall();havoc init_#res;havoc init_#t~ret389, init_#t~ret390, init_~tmp~20;havoc init_~tmp~20;call init_#t~ret389 := register_blkdev(0, #t~string388.base, #t~string388.offset);assume -2147483648 <= init_#t~ret389 && init_#t~ret389 <= 2147483647;~major~0 := init_#t~ret389;havoc init_#t~ret389;BeginParallelComposition{ParallelCodeBlock0: assume ~major~0 < 0;init_#res := ~major~0;ParallelCodeBlock1: assume !(~major~0 < 0);call init_#t~ret390 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset);assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647;init_~tmp~20 := init_#t~ret390;havoc init_#t~ret390;init_#res := init_~tmp~20;}EndParallelCompositionmain_#t~ret392 := init_#res;assume -2147483648 <= main_#t~ret392 && main_#t~ret392 <= 2147483647;main_~tmp~21 := main_#t~ret392;havoc main_#t~ret392; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume !(0 != main_~tmp~21); VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647;main_~tmp___1~8 := main_#t~nondet397;havoc main_#t~nondet397; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume 0 != main_~tmp___1~8;assume -2147483648 <= main_#t~nondet393 && main_#t~nondet393 <= 2147483647;main_~tmp___0~13 := main_#t~nondet393;havoc main_#t~nondet393;main_#t~switch394 := 0 == main_~tmp___0~13; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_main_#t~switch394|=true, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume main_#t~switch394;call ldv_handler_precall();virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0;havoc virtblk_ioctl_#res;havoc virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset, virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset, virtblk_ioctl_#t~ret266, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~mem270.base, virtblk_ioctl_#t~mem270.offset, virtblk_ioctl_#t~ret271, virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset, virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2;virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset := virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset;virtblk_ioctl_~mode := virtblk_ioctl_#in~mode;virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd;virtblk_ioctl_~data := virtblk_ioctl_#in~data;havoc virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset;havoc virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset;havoc virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset;call virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset := #Ultimate.alloc(20);havoc virtblk_ioctl_~err~1;havoc virtblk_ioctl_~tmp~16;havoc virtblk_ioctl_~tmp___0~10;havoc virtblk_ioctl_~tmp___1~6;havoc virtblk_ioctl_~tmp___2~2;call virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset := read~$Pointer$(virtblk_ioctl_~bdev.base, 240 + virtblk_ioctl_~bdev.offset, 8);virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset := virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset;havoc virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset;call virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset := read~$Pointer$(virtblk_ioctl_~disk~0.base, 1075 + virtblk_ioctl_~disk~0.offset, 8);virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset := virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset;havoc virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume 1447184708 == virtblk_ioctl_~cmd % 4294967296;virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset := 0, (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset, virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset := virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset;havoc virtblk_get_id_#res;havoc virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset, virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset, virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset, virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset, virtblk_get_id_#t~ret253, virtblk_get_id_#t~ret254, virtblk_get_id_#t~mem255.base, virtblk_get_id_#t~mem255.offset, virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset, virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset, virtblk_get_id_#t~ret258, virtblk_get_id_#t~ret259, virtblk_get_id_#t~mem260.base, virtblk_get_id_#t~mem260.offset, virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset, virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset, virtblk_get_id_#t~ret263, virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1;virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset := virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset;virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset := virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset;havoc virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset;havoc virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset;havoc virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset;havoc virtblk_get_id_~tmp~15;havoc virtblk_get_id_~tmp___0~9;havoc virtblk_get_id_~tmp___1~5;havoc virtblk_get_id_~tmp___2~1;havoc virtblk_get_id_~tmp___3~1;call virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset := read~$Pointer$(virtblk_get_id_~disk.base, 1075 + virtblk_get_id_~disk.offset, 8);virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset := virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset;havoc virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset;call virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset := read~$Pointer$(virtblk_get_id_#t~mem250.base, 1067 + virtblk_get_id_#t~mem250.offset, 8);call virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset := bio_map_kern(virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, 20, 208);virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset := virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset;havoc virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset;havoc virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset;havoc virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] CALL call virtblk_get_id_#t~ret253 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~24; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0);assume true; VAL [ldv_is_err_~ptr.base=0, ldv_is_err_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |ldv_is_err_#res|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] RET #222#return; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#t~ret400|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807;~tmp~24 := #t~ret400;havoc #t~ret400;#res := ~tmp~24;assume true; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, IS_ERR_~tmp~24=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#res|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] RET #204#return; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~ret253|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume -9223372036854775808 <= virtblk_get_id_#t~ret253 && virtblk_get_id_#t~ret253 <= 9223372036854775807;virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret253;havoc virtblk_get_id_#t~ret253; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume !(0 != virtblk_get_id_~tmp___0~9);call virtblk_get_id_#t~mem255.base, virtblk_get_id_#t~mem255.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset := read~$Pointer$(virtblk_get_id_#t~mem255.base, 1067 + virtblk_get_id_#t~mem255.offset, 8);ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset, ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, 208;havoc ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset;havoc ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset, ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset;ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset := ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset;ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset := ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset;ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3;havoc ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset;havoc ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset;call ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3);ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset := ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset;havoc ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset;ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset := ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset;ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~ldv_func_arg3;havoc ldv_get_blk_rq_#t~ret404, ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28;ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset := ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset;ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask;havoc ldv_get_blk_rq_~tmp~28; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem255.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#t~mem255.offset|=(- 1534), |ULTIMATE.start_virtblk_get_id_#t~mem256.base|=44, |ULTIMATE.start_virtblk_get_id_#t~mem256.offset|=54, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume 0 == ~ldv_blk_rq~0; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem255.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#t~mem255.offset|=(- 1534), |ULTIMATE.start_virtblk_get_id_#t~mem256.base|=44, |ULTIMATE.start_virtblk_get_id_#t~mem256.offset|=54, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296;~ldv_blk_rq~0 := 1; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem255.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#t~mem255.offset|=(- 1534), |ULTIMATE.start_virtblk_get_id_#t~mem256.base|=44, |ULTIMATE.start_virtblk_get_id_#t~mem256.offset|=54, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset;virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset := ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset;virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset := virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset;havoc virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset;havoc virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset;havoc virtblk_get_id_#t~mem255.base, virtblk_get_id_#t~mem255.offset; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~req~1.offset=1, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709551616, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=1, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] CALL call virtblk_get_id_#t~ret258 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709551616, |IS_ERR_#in~ptr.offset|=1, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~24; VAL [IS_ERR_~ptr.base=18446744073709551616, IS_ERR_~ptr.offset=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709551616, |IS_ERR_#in~ptr.offset|=1, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=18446744073709551616, |ldv_is_err_#in~ptr.offset|=1, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0);assume true; VAL [ldv_is_err_~ptr.base=18446744073709551616, ldv_is_err_~ptr.offset=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ldv_is_err_#in~ptr.base|=18446744073709551616, |ldv_is_err_#in~ptr.offset|=1, |ldv_is_err_#res|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] RET #222#return; VAL [IS_ERR_~ptr.base=18446744073709551616, IS_ERR_~ptr.offset=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709551616, |IS_ERR_#in~ptr.offset|=1, |IS_ERR_#t~ret400|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807;~tmp~24 := #t~ret400;havoc #t~ret400;#res := ~tmp~24;assume true; VAL [IS_ERR_~ptr.base=18446744073709551616, IS_ERR_~ptr.offset=1, IS_ERR_~tmp~24=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |IS_ERR_#in~ptr.base|=18446744073709551616, |IS_ERR_#in~ptr.offset|=1, |IS_ERR_#res|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] RET #212#return; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~req~1.offset=1, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709551616, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=1, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~ret258|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume -9223372036854775808 <= virtblk_get_id_#t~ret258 && virtblk_get_id_#t~ret258 <= 9223372036854775807;virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret258;havoc virtblk_get_id_#t~ret258; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~req~1.offset=1, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709551616, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=1, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume !(0 != virtblk_get_id_~tmp___2~1);call write~int(7, virtblk_get_id_~req~1.base, 64 + virtblk_get_id_~req~1.offset, 4);call virtblk_get_id_#t~mem260.base, virtblk_get_id_#t~mem260.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset := read~$Pointer$(virtblk_get_id_#t~mem260.base, 1067 + virtblk_get_id_#t~mem260.offset, 8);call virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~ret263 := blk_execute_rq(virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset, virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, 0);assume -2147483648 <= virtblk_get_id_#t~ret263 && virtblk_get_id_#t~ret263 <= 2147483647;virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret263;havoc virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset;havoc virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset;havoc virtblk_get_id_#t~ret263;havoc virtblk_get_id_#t~mem260.base, virtblk_get_id_#t~mem260.offset;virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~req~1.offset=1, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709551616, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=1, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=35, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] virtblk_ioctl_#t~ret266 := virtblk_get_id_#res;assume -2147483648 <= virtblk_ioctl_#t~ret266 && virtblk_ioctl_#t~ret266 <= 2147483647;virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret266;havoc virtblk_ioctl_#t~ret266;BeginParallelComposition{ParallelCodeBlock0: assume !(0 == virtblk_ioctl_~err~1);ParallelCodeBlock1: assume 0 == virtblk_ioctl_~err~1;copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset, copy_to_user_#in~src.base, copy_to_user_#in~src.offset, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, 20;havoc copy_to_user_#res;havoc copy_to_user_#t~ret33, copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size, copy_to_user_~tmp~0;copy_to_user_~dst.base, copy_to_user_~dst.offset := copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset;copy_to_user_~src.base, copy_to_user_~src.offset := copy_to_user_#in~src.base, copy_to_user_#in~src.offset;copy_to_user_~size := copy_to_user_#in~size;havoc copy_to_user_~tmp~0;call might_fault();call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size);copy_to_user_~tmp~0 := copy_to_user_#t~ret33;havoc copy_to_user_#t~ret33;copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296);virtblk_ioctl_#t~ret267 := copy_to_user_#res;assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647;virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret267;havoc virtblk_ioctl_#t~ret267;BeginParallelComposition{ParallelCodeBlock0: assume 0 != virtblk_ioctl_~tmp~16;virtblk_ioctl_~err~1 := -14;ParallelCodeBlock1: assume !(0 != virtblk_ioctl_~tmp~16);}EndParallelComposition}EndParallelCompositionvirtblk_ioctl_#res := virtblk_ioctl_~err~1;call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset);havoc virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=35, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=1, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~req~1.offset=1, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~tmp~16=1, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=35, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=1, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709551616, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=1, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret267|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] main_#t~ret395 := virtblk_ioctl_#res;assume -2147483648 <= main_#t~ret395 && main_#t~ret395 <= 2147483647;havoc main_#t~ret395; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=35, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=1, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=1, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~req~1.offset=1, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~tmp~16=1, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=35, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=1, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709551616, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=1, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret267|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647;main_~tmp___1~8 := main_#t~nondet397;havoc main_#t~nondet397; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=35, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=1, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=0, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~req~1.offset=1, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~tmp~16=1, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=35, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=1, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709551616, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=1, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret267|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume !(0 != main_~tmp___1~8);call ldv_handler_precall();call unregister_blkdev(~major~0, #t~string391.base, #t~string391.offset);call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=35, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=1, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=0, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~req~1.offset=1, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~tmp~16=1, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=35, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=1, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709551616, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=1, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret267|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume !(0 == ~ldv_blk_rq~0); VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=35, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=1, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=44, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=1, ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=18446744073709551616, ULTIMATE.start_ldv_get_blk_rq_~res.offset=1, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=0, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=79, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=82, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~disk.offset=(- 1010), ULTIMATE.start_virtblk_get_id_~id_str.base=35, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=18446744073709551616, ULTIMATE.start_virtblk_get_id_~req~1.offset=1, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=0, ULTIMATE.start_virtblk_get_id_~tmp___3~1=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=0, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=79, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=18446744073709551616, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=(- 1010), ULTIMATE.start_virtblk_ioctl_~err~1=(- 14), ULTIMATE.start_virtblk_ioctl_~mode=82, ULTIMATE.start_virtblk_ioctl_~tmp~16=1, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=35, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=1, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret390|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=44, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=54, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=18446744073709551616, |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=1, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=18446744073709551616, |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=1, |ULTIMATE.start_main_#t~switch394|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=18446744073709551616, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=(- 1010), |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=35, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=79, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=82, |ULTIMATE.start_virtblk_ioctl_#res|=(- 14), |ULTIMATE.start_virtblk_ioctl_#t~ret267|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] CALL call ldv_error(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] assume !false; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string108.base|=23, |#t~string108.offset|=0, |#t~string289.base|=42, |#t~string289.offset|=0, |#t~string292.base|=26, |#t~string292.offset|=0, |#t~string306.base|=39, |#t~string306.offset|=0, |#t~string309.base|=25, |#t~string309.offset|=0, |#t~string312.base|=34, |#t~string312.offset|=0, |#t~string387.base|=30, |#t~string387.offset|=0, |#t~string388.base|=13, |#t~string388.offset|=0, |#t~string391.base|=29, |#t~string391.offset|=0, |~#__this_module~0.base|=17, |~#__this_module~0.offset|=14, |~#features~0.base|=31, |~#features~0.offset|=0, |~#id_table~0.base|=38, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=27, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=18446744073709551616, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3325] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28); [L4142] call #t~string289.base, #t~string289.offset := #Ultimate.alloc(22); [L4146] call #t~string292.base, #t~string292.offset := #Ultimate.alloc(9); [L4180] call #t~string306.base, #t~string306.offset := #Ultimate.alloc(5); [L4180] call write~init~int(118, #t~string306.base, #t~string306.offset, 1); [L4180] call write~init~int(100, #t~string306.base, 1 + #t~string306.offset, 1); [L4180] call write~init~int(37, #t~string306.base, 2 + #t~string306.offset, 1); [L4180] call write~init~int(99, #t~string306.base, 3 + #t~string306.offset, 1); [L4180] call write~init~int(0, #t~string306.base, 4 + #t~string306.offset, 1); [L4183] call #t~string309.base, #t~string309.offset := #Ultimate.alloc(7); [L4183] call write~init~int(118, #t~string309.base, #t~string309.offset, 1); [L4183] call write~init~int(100, #t~string309.base, 1 + #t~string309.offset, 1); [L4183] call write~init~int(37, #t~string309.base, 2 + #t~string309.offset, 1); [L4183] call write~init~int(99, #t~string309.base, 3 + #t~string309.offset, 1); [L4183] call write~init~int(37, #t~string309.base, 4 + #t~string309.offset, 1); [L4183] call write~init~int(99, #t~string309.base, 5 + #t~string309.offset, 1); [L4183] call write~init~int(0, #t~string309.base, 6 + #t~string309.offset, 1); [L4188] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(9); [L4303] call #t~string387.base, #t~string387.offset := #Ultimate.alloc(11); [L4310] call #t~string388.base, #t~string388.offset := #Ultimate.alloc(8); [L4325] call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36); [L4299-L4302] call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4); [L4299-L4302] call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8); [L4297-L4298] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16); [L4297-L4298] call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4); [L4303-L4304] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141); [L4303-L4304] call write~init~$Pointer$(#t~string387.base, #t~string387.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8); [L4330] ~__mod_virtio_device_table~0.device := 0; [L4330] ~__mod_virtio_device_table~0.vendor := 0; [?] havoc main_#res; [?] havoc main_#t~ret392, main_#t~nondet393, main_#t~switch394, main_#t~ret395, main_#t~ret396, main_#t~nondet397, main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0.base, main_~var_group2~0.offset, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8; [L4338] havoc main_~var_group1~0.base, main_~var_group1~0.offset; [L4339] havoc main_~var_virtblk_ioctl_5_p1~0; [L4340] havoc main_~var_virtblk_ioctl_5_p2~0; [L4341] havoc main_~var_virtblk_ioctl_5_p3~0; [L4342] havoc main_~var_group2~0.base, main_~var_group2~0.offset; [L4343] havoc main_~tmp~21; [L4344] havoc main_~tmp___0~13; [L4345] havoc main_~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] call ldv_initialize(); [L4350] call ldv_handler_precall(); [L4351] havoc init_#res; [L4351] havoc init_#t~ret389, init_#t~ret390, init_~tmp~20; [L4307] havoc init_~tmp~20; [L4310] call init_#t~ret389 := register_blkdev(0, #t~string388.base, #t~string388.offset); [L4310] assume -2147483648 <= init_#t~ret389 && init_#t~ret389 <= 2147483647; [L4310] ~major~0 := init_#t~ret389; [L4310] havoc init_#t~ret389; [L4311-L4315] assume !(~major~0 < 0); [L4316] call init_#t~ret390 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4316] assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647; [L4316] init_~tmp~20 := init_#t~ret390; [L4316] havoc init_#t~ret390; [L4317] init_#res := init_~tmp~20; [L4351] main_#t~ret392 := init_#res; [L4351] assume -2147483648 <= main_#t~ret392 && main_#t~ret392 <= 2147483647; [L4351] main_~tmp~21 := main_#t~ret392; [L4351] havoc main_#t~ret392; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4352-L4356] assume !(0 != main_~tmp~21); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647; [L4374] main_~tmp___1~8 := main_#t~nondet397; [L4374] havoc main_#t~nondet397; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp___1~8=1, main_~tmp~21=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375-L4379] assume 0 != main_~tmp___1~8; [L4359] assume -2147483648 <= main_#t~nondet393 && main_#t~nondet393 <= 2147483647; [L4359] main_~tmp___0~13 := main_#t~nondet393; [L4359] havoc main_#t~nondet393; [L4361] main_#t~switch394 := 0 == main_~tmp___0~13; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4361] assume main_#t~switch394; [L4362] call ldv_handler_precall(); [L4363] virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0; [L4363] havoc virtblk_ioctl_#res; [L4363] havoc virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset, virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset, virtblk_ioctl_#t~ret266, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~mem270.base, virtblk_ioctl_#t~mem270.offset, virtblk_ioctl_#t~ret271, virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset, virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4009-L4056] virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset := virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset; [L4009-L4056] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4009-L4056] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4009-L4056] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4012] havoc virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset; [L4013] havoc virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset; [L4014] havoc virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset; [L4015] call virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset := #Ultimate.alloc(20); [L4016] havoc virtblk_ioctl_~err~1; [L4017] havoc virtblk_ioctl_~tmp~16; [L4018] havoc virtblk_ioctl_~tmp___0~10; [L4019] havoc virtblk_ioctl_~tmp___1~6; [L4020] havoc virtblk_ioctl_~tmp___2~2; [L4023] call virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset := read~$Pointer$(virtblk_ioctl_~bdev.base, 240 + virtblk_ioctl_~bdev.offset, 8); [L4023] virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset := virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset; [L4023] havoc virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset; [L4024] call virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset := read~$Pointer$(virtblk_ioctl_~disk~0.base, 1075 + virtblk_ioctl_~disk~0.offset, 8); [L4024] virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset := virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset; [L4024] havoc virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4025-L4041] assume 1447184708 == virtblk_ioctl_~cmd % 4294967296; [L4026] virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset := 0, (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4027] virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset, virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset := virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; [L4027] havoc virtblk_get_id_#res; [L4027] havoc virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset, virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset, virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset, virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset, virtblk_get_id_#t~ret253, virtblk_get_id_#t~ret254, virtblk_get_id_#t~mem255.base, virtblk_get_id_#t~mem255.offset, virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset, virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset, virtblk_get_id_#t~ret258, virtblk_get_id_#t~ret259, virtblk_get_id_#t~mem260.base, virtblk_get_id_#t~mem260.offset, virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset, virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset, virtblk_get_id_#t~ret263, virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1; [L3974-L4008] virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset := virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset; [L3974-L4008] virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset := virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset; [L3976] havoc virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset; [L3977] havoc virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset; [L3978] havoc virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset; [L3979] havoc virtblk_get_id_~tmp~15; [L3980] havoc virtblk_get_id_~tmp___0~9; [L3981] havoc virtblk_get_id_~tmp___1~5; [L3982] havoc virtblk_get_id_~tmp___2~1; [L3983] havoc virtblk_get_id_~tmp___3~1; [L3986] call virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset := read~$Pointer$(virtblk_get_id_~disk.base, 1075 + virtblk_get_id_~disk.offset, 8); [L3986] virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset := virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset; [L3986] havoc virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset; [L3987] call virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L3987] call virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset := read~$Pointer$(virtblk_get_id_#t~mem250.base, 1067 + virtblk_get_id_#t~mem250.offset, 8); [L3987] call virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset := bio_map_kern(virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, 20, 208); [L3987] virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset := virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset; [L3987] havoc virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset; [L3987] havoc virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset; [L3987] havoc virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] CALL call virtblk_get_id_#t~ret253 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3510] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret400=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3120] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3988] RET call virtblk_get_id_#t~ret253 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret253=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] assume -9223372036854775808 <= virtblk_get_id_#t~ret253 && virtblk_get_id_#t~ret253 <= 9223372036854775807; [L3988] virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret253; [L3988] havoc virtblk_get_id_#t~ret253; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3989-L3994] assume !(0 != virtblk_get_id_~tmp___0~9); [L3995] call virtblk_get_id_#t~mem255.base, virtblk_get_id_#t~mem255.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L3995] call virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset := read~$Pointer$(virtblk_get_id_#t~mem255.base, 1067 + virtblk_get_id_#t~mem255.offset, 8); [L3995] ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset, ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, 208; [L3995] havoc ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L3995] havoc ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset, ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset := ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset := ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4418] havoc ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset; [L4419] havoc ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4422] call ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3); [L4422] ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset := ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset; [L4422] havoc ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset; [L4423] ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset := ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4424] ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~ldv_func_arg3; [L4424] havoc ldv_get_blk_rq_#t~ret404, ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28; [L4497-L4522] ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset := ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset; [L4497-L4522] ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask; [L4499] havoc ldv_get_blk_rq_~tmp~28; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem255.base=18446744073709551616, virtblk_get_id_#t~mem255.offset=-1534, virtblk_get_id_#t~mem256.base=44, virtblk_get_id_#t~mem256.offset=54, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4502-L4506] assume 0 == ~ldv_blk_rq~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem255.base=18446744073709551616, virtblk_get_id_#t~mem255.offset=-1534, virtblk_get_id_#t~mem256.base=44, virtblk_get_id_#t~mem256.offset=54, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4507-L4519] assume (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296; [L4508] ~ldv_blk_rq~0 := 1; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem255.base=18446744073709551616, virtblk_get_id_#t~mem255.offset=-1534, virtblk_get_id_#t~mem256.base=44, virtblk_get_id_#t~mem256.offset=54, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4425] ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset; [L3995] virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset := ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L3995] virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset := virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset; [L3995] havoc virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset; [L3995] havoc virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset; [L3995] havoc virtblk_get_id_#t~mem255.base, virtblk_get_id_#t~mem255.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] CALL call virtblk_get_id_#t~ret258 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=18446744073709551616, ~ptr.offset=1] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3510] ensures true; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=18446744073709551616, ~ptr.offset=1] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #t~ret400=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=18446744073709551616, ~ptr.offset=1] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3120] ensures true; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=18446744073709551616, ~ptr.offset=1, ~tmp~24=0] [L3996] RET call virtblk_get_id_#t~ret258 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret258=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] assume -9223372036854775808 <= virtblk_get_id_#t~ret258 && virtblk_get_id_#t~ret258 <= 9223372036854775807; [L3996] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret258; [L3996] havoc virtblk_get_id_#t~ret258; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3997-L4003] assume !(0 != virtblk_get_id_~tmp___2~1); [L4004] call write~int(7, virtblk_get_id_~req~1.base, 64 + virtblk_get_id_~req~1.offset, 4); [L4005] call virtblk_get_id_#t~mem260.base, virtblk_get_id_#t~mem260.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4005] call virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset := read~$Pointer$(virtblk_get_id_#t~mem260.base, 1067 + virtblk_get_id_#t~mem260.offset, 8); [L4005] call virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4005] call virtblk_get_id_#t~ret263 := blk_execute_rq(virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset, virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, 0); [L4005] assume -2147483648 <= virtblk_get_id_#t~ret263 && virtblk_get_id_#t~ret263 <= 2147483647; [L4005] virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret263; [L4005] havoc virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset; [L4005] havoc virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset; [L4005] havoc virtblk_get_id_#t~ret263; [L4005] havoc virtblk_get_id_#t~mem260.base, virtblk_get_id_#t~mem260.offset; [L4006] virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4027] virtblk_ioctl_#t~ret266 := virtblk_get_id_#res; [L4027] assume -2147483648 <= virtblk_ioctl_#t~ret266 && virtblk_ioctl_#t~ret266 <= 2147483647; [L4027] virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret266; [L4027] havoc virtblk_ioctl_#t~ret266; [L4028-L4037] assume 0 == virtblk_ioctl_~err~1; [L4029] copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset, copy_to_user_#in~src.base, copy_to_user_#in~src.offset, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, 20; [L4029] havoc copy_to_user_#res; [L4029] havoc copy_to_user_#t~ret33, copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size, copy_to_user_~tmp~0; [L3215-L3224] copy_to_user_~dst.base, copy_to_user_~dst.offset := copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset; [L3215-L3224] copy_to_user_~src.base, copy_to_user_~src.offset := copy_to_user_#in~src.base, copy_to_user_#in~src.offset; [L3215-L3224] copy_to_user_~size := copy_to_user_#in~size; [L3217] havoc copy_to_user_~tmp~0; [L3220] call might_fault(); [L3221] call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size); [L3221] copy_to_user_~tmp~0 := copy_to_user_#t~ret33; [L3221] havoc copy_to_user_#t~ret33; [L3222] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4029] virtblk_ioctl_#t~ret267 := copy_to_user_#res; [L4029] assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647; [L4029] virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret267; [L4029] havoc virtblk_ioctl_#t~ret267; [L4030-L4034] assume 0 != virtblk_ioctl_~tmp~16; [L4031] virtblk_ioctl_~err~1 := -14; [L4038] virtblk_ioctl_#res := virtblk_ioctl_~err~1; [L4015] call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset); [L4038] havoc virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4363] main_#t~ret395 := virtblk_ioctl_#res; [L4363] assume -2147483648 <= main_#t~ret395 && main_#t~ret395 <= 2147483647; [L4363] havoc main_#t~ret395; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647; [L4374] main_~tmp___1~8 := main_#t~nondet397; [L4374] havoc main_#t~nondet397; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375-L4379] assume !(0 != main_~tmp___1~8); [L4381] call ldv_handler_precall(); [L4325] call unregister_blkdev(~major~0, #t~string391.base, #t~string391.offset); [L4326] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4542-L4546] assume !(0 == ~ldv_blk_rq~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4545] CALL call ldv_error(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4433] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3325] call #t~string108.base, #t~string108.offset := #Ultimate.alloc(28); [L4142] call #t~string289.base, #t~string289.offset := #Ultimate.alloc(22); [L4146] call #t~string292.base, #t~string292.offset := #Ultimate.alloc(9); [L4180] call #t~string306.base, #t~string306.offset := #Ultimate.alloc(5); [L4180] call write~init~int(118, #t~string306.base, #t~string306.offset, 1); [L4180] call write~init~int(100, #t~string306.base, 1 + #t~string306.offset, 1); [L4180] call write~init~int(37, #t~string306.base, 2 + #t~string306.offset, 1); [L4180] call write~init~int(99, #t~string306.base, 3 + #t~string306.offset, 1); [L4180] call write~init~int(0, #t~string306.base, 4 + #t~string306.offset, 1); [L4183] call #t~string309.base, #t~string309.offset := #Ultimate.alloc(7); [L4183] call write~init~int(118, #t~string309.base, #t~string309.offset, 1); [L4183] call write~init~int(100, #t~string309.base, 1 + #t~string309.offset, 1); [L4183] call write~init~int(37, #t~string309.base, 2 + #t~string309.offset, 1); [L4183] call write~init~int(99, #t~string309.base, 3 + #t~string309.offset, 1); [L4183] call write~init~int(37, #t~string309.base, 4 + #t~string309.offset, 1); [L4183] call write~init~int(99, #t~string309.base, 5 + #t~string309.offset, 1); [L4183] call write~init~int(0, #t~string309.base, 6 + #t~string309.offset, 1); [L4188] call #t~string312.base, #t~string312.offset := #Ultimate.alloc(9); [L4303] call #t~string387.base, #t~string387.offset := #Ultimate.alloc(11); [L4310] call #t~string388.base, #t~string388.offset := #Ultimate.alloc(8); [L4325] call #t~string391.base, #t~string391.offset := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36); [L4299-L4302] call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4); [L4299-L4302] call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4); [L4299-L4302] call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8); [L4080-L4081] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8); [L4297-L4298] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16); [L4297-L4298] call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4); [L4297-L4298] call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4); [L4303-L4304] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141); [L4303-L4304] call write~init~$Pointer$(#t~string387.base, #t~string387.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8); [L4303-L4304] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8); [L4330] ~__mod_virtio_device_table~0.device := 0; [L4330] ~__mod_virtio_device_table~0.vendor := 0; [?] havoc main_#res; [?] havoc main_#t~ret392, main_#t~nondet393, main_#t~switch394, main_#t~ret395, main_#t~ret396, main_#t~nondet397, main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0.base, main_~var_group2~0.offset, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8; [L4338] havoc main_~var_group1~0.base, main_~var_group1~0.offset; [L4339] havoc main_~var_virtblk_ioctl_5_p1~0; [L4340] havoc main_~var_virtblk_ioctl_5_p2~0; [L4341] havoc main_~var_virtblk_ioctl_5_p3~0; [L4342] havoc main_~var_group2~0.base, main_~var_group2~0.offset; [L4343] havoc main_~tmp~21; [L4344] havoc main_~tmp___0~13; [L4345] havoc main_~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] call ldv_initialize(); [L4350] call ldv_handler_precall(); [L4351] havoc init_#res; [L4351] havoc init_#t~ret389, init_#t~ret390, init_~tmp~20; [L4307] havoc init_~tmp~20; [L4310] call init_#t~ret389 := register_blkdev(0, #t~string388.base, #t~string388.offset); [L4310] assume -2147483648 <= init_#t~ret389 && init_#t~ret389 <= 2147483647; [L4310] ~major~0 := init_#t~ret389; [L4310] havoc init_#t~ret389; [L4311-L4315] assume !(~major~0 < 0); [L4316] call init_#t~ret390 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4316] assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647; [L4316] init_~tmp~20 := init_#t~ret390; [L4316] havoc init_#t~ret390; [L4317] init_#res := init_~tmp~20; [L4351] main_#t~ret392 := init_#res; [L4351] assume -2147483648 <= main_#t~ret392 && main_#t~ret392 <= 2147483647; [L4351] main_~tmp~21 := main_#t~ret392; [L4351] havoc main_#t~ret392; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4352-L4356] assume !(0 != main_~tmp~21); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647; [L4374] main_~tmp___1~8 := main_#t~nondet397; [L4374] havoc main_#t~nondet397; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp___1~8=1, main_~tmp~21=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375-L4379] assume 0 != main_~tmp___1~8; [L4359] assume -2147483648 <= main_#t~nondet393 && main_#t~nondet393 <= 2147483647; [L4359] main_~tmp___0~13 := main_#t~nondet393; [L4359] havoc main_#t~nondet393; [L4361] main_#t~switch394 := 0 == main_~tmp___0~13; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4361] assume main_#t~switch394; [L4362] call ldv_handler_precall(); [L4363] virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0; [L4363] havoc virtblk_ioctl_#res; [L4363] havoc virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset, virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset, virtblk_ioctl_#t~ret266, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~mem268.base, virtblk_ioctl_#t~mem268.offset, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~mem270.base, virtblk_ioctl_#t~mem270.offset, virtblk_ioctl_#t~ret271, virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset, virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4009-L4056] virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset := virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset; [L4009-L4056] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4009-L4056] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4009-L4056] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4012] havoc virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset; [L4013] havoc virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset; [L4014] havoc virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset; [L4015] call virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset := #Ultimate.alloc(20); [L4016] havoc virtblk_ioctl_~err~1; [L4017] havoc virtblk_ioctl_~tmp~16; [L4018] havoc virtblk_ioctl_~tmp___0~10; [L4019] havoc virtblk_ioctl_~tmp___1~6; [L4020] havoc virtblk_ioctl_~tmp___2~2; [L4023] call virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset := read~$Pointer$(virtblk_ioctl_~bdev.base, 240 + virtblk_ioctl_~bdev.offset, 8); [L4023] virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset := virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset; [L4023] havoc virtblk_ioctl_#t~mem264.base, virtblk_ioctl_#t~mem264.offset; [L4024] call virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset := read~$Pointer$(virtblk_ioctl_~disk~0.base, 1075 + virtblk_ioctl_~disk~0.offset, 8); [L4024] virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset := virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset; [L4024] havoc virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4025-L4041] assume 1447184708 == virtblk_ioctl_~cmd % 4294967296; [L4026] virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset := 0, (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4027] virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset, virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset := virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; [L4027] havoc virtblk_get_id_#res; [L4027] havoc virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset, virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset, virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset, virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset, virtblk_get_id_#t~ret253, virtblk_get_id_#t~ret254, virtblk_get_id_#t~mem255.base, virtblk_get_id_#t~mem255.offset, virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset, virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset, virtblk_get_id_#t~ret258, virtblk_get_id_#t~ret259, virtblk_get_id_#t~mem260.base, virtblk_get_id_#t~mem260.offset, virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset, virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset, virtblk_get_id_#t~ret263, virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1; [L3974-L4008] virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset := virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset; [L3974-L4008] virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset := virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset; [L3976] havoc virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset; [L3977] havoc virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset; [L3978] havoc virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset; [L3979] havoc virtblk_get_id_~tmp~15; [L3980] havoc virtblk_get_id_~tmp___0~9; [L3981] havoc virtblk_get_id_~tmp___1~5; [L3982] havoc virtblk_get_id_~tmp___2~1; [L3983] havoc virtblk_get_id_~tmp___3~1; [L3986] call virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset := read~$Pointer$(virtblk_get_id_~disk.base, 1075 + virtblk_get_id_~disk.offset, 8); [L3986] virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset := virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset; [L3986] havoc virtblk_get_id_#t~mem249.base, virtblk_get_id_#t~mem249.offset; [L3987] call virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L3987] call virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset := read~$Pointer$(virtblk_get_id_#t~mem250.base, 1067 + virtblk_get_id_#t~mem250.offset, 8); [L3987] call virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset := bio_map_kern(virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, 20, 208); [L3987] virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset := virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset; [L3987] havoc virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset; [L3987] havoc virtblk_get_id_#t~ret252.base, virtblk_get_id_#t~ret252.offset; [L3987] havoc virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] CALL call virtblk_get_id_#t~ret253 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3510] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret400=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3120] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3988] RET call virtblk_get_id_#t~ret253 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret253=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] assume -9223372036854775808 <= virtblk_get_id_#t~ret253 && virtblk_get_id_#t~ret253 <= 9223372036854775807; [L3988] virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret253; [L3988] havoc virtblk_get_id_#t~ret253; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3989-L3994] assume !(0 != virtblk_get_id_~tmp___0~9); [L3995] call virtblk_get_id_#t~mem255.base, virtblk_get_id_#t~mem255.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L3995] call virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset := read~$Pointer$(virtblk_get_id_#t~mem255.base, 1067 + virtblk_get_id_#t~mem255.offset, 8); [L3995] ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset, ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, 208; [L3995] havoc ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L3995] havoc ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset, ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset := ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset := ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4418] havoc ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset; [L4419] havoc ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4422] call ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3); [L4422] ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset := ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset; [L4422] havoc ldv_blk_make_request_5_#t~ret401.base, ldv_blk_make_request_5_#t~ret401.offset; [L4423] ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset := ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4424] ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~ldv_func_arg3; [L4424] havoc ldv_get_blk_rq_#t~ret404, ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28; [L4497-L4522] ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset := ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset; [L4497-L4522] ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask; [L4499] havoc ldv_get_blk_rq_~tmp~28; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem255.base=18446744073709551616, virtblk_get_id_#t~mem255.offset=-1534, virtblk_get_id_#t~mem256.base=44, virtblk_get_id_#t~mem256.offset=54, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4502-L4506] assume 0 == ~ldv_blk_rq~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem255.base=18446744073709551616, virtblk_get_id_#t~mem255.offset=-1534, virtblk_get_id_#t~mem256.base=44, virtblk_get_id_#t~mem256.offset=54, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4507-L4519] assume (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296; [L4508] ~ldv_blk_rq~0 := 1; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem255.base=18446744073709551616, virtblk_get_id_#t~mem255.offset=-1534, virtblk_get_id_#t~mem256.base=44, virtblk_get_id_#t~mem256.offset=54, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4425] ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset; [L3995] virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset := ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L3995] virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset := virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset; [L3995] havoc virtblk_get_id_#t~ret257.base, virtblk_get_id_#t~ret257.offset; [L3995] havoc virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset; [L3995] havoc virtblk_get_id_#t~mem255.base, virtblk_get_id_#t~mem255.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] CALL call virtblk_get_id_#t~ret258 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4408] havoc ~tmp~24; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=18446744073709551616, ~ptr.offset=1] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4449] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3510] ensures true; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=18446744073709551616, ~ptr.offset=1] [L4411] RET call #t~ret400 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #t~ret400=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=18446744073709551616, ~ptr.offset=1] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3120] ensures true; VAL [#in~ptr.base=18446744073709551616, #in~ptr.offset=1, #NULL.base=0, #NULL.offset=0, #res=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr.base=18446744073709551616, ~ptr.offset=1, ~tmp~24=0] [L3996] RET call virtblk_get_id_#t~ret258 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret258=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] assume -9223372036854775808 <= virtblk_get_id_#t~ret258 && virtblk_get_id_#t~ret258 <= 9223372036854775807; [L3996] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret258; [L3996] havoc virtblk_get_id_#t~ret258; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3997-L4003] assume !(0 != virtblk_get_id_~tmp___2~1); [L4004] call write~int(7, virtblk_get_id_~req~1.base, 64 + virtblk_get_id_~req~1.offset, 4); [L4005] call virtblk_get_id_#t~mem260.base, virtblk_get_id_#t~mem260.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4005] call virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset := read~$Pointer$(virtblk_get_id_#t~mem260.base, 1067 + virtblk_get_id_#t~mem260.offset, 8); [L4005] call virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L4005] call virtblk_get_id_#t~ret263 := blk_execute_rq(virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset, virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, 0); [L4005] assume -2147483648 <= virtblk_get_id_#t~ret263 && virtblk_get_id_#t~ret263 <= 2147483647; [L4005] virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret263; [L4005] havoc virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset; [L4005] havoc virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset; [L4005] havoc virtblk_get_id_#t~ret263; [L4005] havoc virtblk_get_id_#t~mem260.base, virtblk_get_id_#t~mem260.offset; [L4006] virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0.base=35, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4027] virtblk_ioctl_#t~ret266 := virtblk_get_id_#res; [L4027] assume -2147483648 <= virtblk_ioctl_#t~ret266 && virtblk_ioctl_#t~ret266 <= 2147483647; [L4027] virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret266; [L4027] havoc virtblk_ioctl_#t~ret266; [L4028-L4037] assume 0 == virtblk_ioctl_~err~1; [L4029] copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset, copy_to_user_#in~src.base, copy_to_user_#in~src.offset, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, 20; [L4029] havoc copy_to_user_#res; [L4029] havoc copy_to_user_#t~ret33, copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size, copy_to_user_~tmp~0; [L3215-L3224] copy_to_user_~dst.base, copy_to_user_~dst.offset := copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset; [L3215-L3224] copy_to_user_~src.base, copy_to_user_~src.offset := copy_to_user_#in~src.base, copy_to_user_#in~src.offset; [L3215-L3224] copy_to_user_~size := copy_to_user_#in~size; [L3217] havoc copy_to_user_~tmp~0; [L3220] call might_fault(); [L3221] call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size); [L3221] copy_to_user_~tmp~0 := copy_to_user_#t~ret33; [L3221] havoc copy_to_user_#t~ret33; [L3222] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4029] virtblk_ioctl_#t~ret267 := copy_to_user_#res; [L4029] assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647; [L4029] virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret267; [L4029] havoc virtblk_ioctl_#t~ret267; [L4030-L4034] assume 0 != virtblk_ioctl_~tmp~16; [L4031] virtblk_ioctl_~err~1 := -14; [L4038] virtblk_ioctl_#res := virtblk_ioctl_~err~1; [L4015] call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset); [L4038] havoc virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4363] main_#t~ret395 := virtblk_ioctl_#res; [L4363] assume -2147483648 <= main_#t~ret395 && main_#t~ret395 <= 2147483647; [L4363] havoc main_#t~ret395; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647; [L4374] main_~tmp___1~8 := main_#t~nondet397; [L4374] havoc main_#t~nondet397; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375-L4379] assume !(0 != main_~tmp___1~8); [L4381] call ldv_handler_precall(); [L4325] call unregister_blkdev(~major~0, #t~string391.base, #t~string391.offset); [L4326] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4542-L4546] assume !(0 == ~ldv_blk_rq~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=35, copy_to_user_#in~src.offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=35, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=44, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=18446744073709551616, ldv_blk_make_request_5_#res.offset=1, ldv_blk_make_request_5_~ldv_func_arg1.base=44, ldv_blk_make_request_5_~ldv_func_arg1.offset=54, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0.offset=1, ldv_blk_make_request_5_~tmp~25.base=18446744073709551616, ldv_blk_make_request_5_~tmp~25.offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=18446744073709551616, ldv_get_blk_rq_#in~res.offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=18446744073709551616, ldv_get_blk_rq_~res.offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=79, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=18446744073709551616, virtblk_get_id_#in~disk.offset=-1010, virtblk_get_id_#in~id_str.base=35, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=18446744073709551616, virtblk_get_id_~disk.offset=-1010, virtblk_get_id_~id_str.base=35, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=18446744073709551616, virtblk_get_id_~req~1.offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2.base=0, virtblk_get_id_~vblk~2.offset=0, virtblk_ioctl_#in~bdev.base=79, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev.base=79, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=18446744073709551616, virtblk_ioctl_~disk~0.offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=0, virtblk_ioctl_~vblk~3.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4545] CALL call ldv_error(); VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4433] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string108.base=23, #t~string108.offset=0, #t~string289.base=42, #t~string289.offset=0, #t~string292.base=26, #t~string292.offset=0, #t~string306.base=39, #t~string306.offset=0, #t~string309.base=25, #t~string309.offset=0, #t~string312.base=34, #t~string312.offset=0, #t~string387.base=30, #t~string387.offset=0, #t~string388.base=13, #t~string388.offset=0, #t~string391.base=29, #t~string391.offset=0, ~#__this_module~0.base=17, ~#__this_module~0.offset=14, ~#features~0.base=31, ~#features~0.offset=0, ~#id_table~0.base=38, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=27, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=18446744073709551616, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5); [L4180] FCALL call write~init~int(118, { base: #t~string306!base, offset: #t~string306!offset }, 1); [L4180] FCALL call write~init~int(100, { base: #t~string306!base, offset: 1 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(37, { base: #t~string306!base, offset: 2 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(99, { base: #t~string306!base, offset: 3 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(0, { base: #t~string306!base, offset: 4 + #t~string306!offset }, 1); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7); [L4183] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4183] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 5 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(0, { base: #t~string309!base, offset: 6 + #t~string309!offset }, 1); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4299-L4302] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4297-L4298] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4330] ~__mod_virtio_device_table~0!device := 0; [L4330] ~__mod_virtio_device_table~0!vendor := 0; [?] havoc main_#res; [?] havoc main_#t~ret392, main_#t~nondet393, main_#t~switch394, main_#t~ret395, main_#t~ret396, main_#t~nondet397, main_~var_group1~0, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8; [L4338] havoc main_~var_group1~0; [L4339] havoc main_~var_virtblk_ioctl_5_p1~0; [L4340] havoc main_~var_virtblk_ioctl_5_p2~0; [L4341] havoc main_~var_virtblk_ioctl_5_p3~0; [L4342] havoc main_~var_group2~0; [L4343] havoc main_~tmp~21; [L4344] havoc main_~tmp___0~13; [L4345] havoc main_~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); [L4351] havoc init_#res; [L4351] havoc init_#t~ret389, init_#t~ret390, init_~tmp~20; [L4307] havoc init_~tmp~20; [L4310] FCALL call init_#t~ret389 := register_blkdev(0, #t~string388); [L4310] assume -2147483648 <= init_#t~ret389 && init_#t~ret389 <= 2147483647; [L4310] ~major~0 := init_#t~ret389; [L4310] havoc init_#t~ret389; [L4311] COND FALSE !(~major~0 < 0) [L4316] FCALL call init_#t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647; [L4316] init_~tmp~20 := init_#t~ret390; [L4316] havoc init_#t~ret390; [L4317] init_#res := init_~tmp~20; [L4351] main_#t~ret392 := init_#res; [L4351] assume -2147483648 <= main_#t~ret392 && main_#t~ret392 <= 2147483647; [L4351] main_~tmp~21 := main_#t~ret392; [L4351] havoc main_#t~ret392; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4352] COND FALSE !(0 != main_~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647; [L4374] main_~tmp___1~8 := main_#t~nondet397; [L4374] havoc main_#t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp___1~8=1, main_~tmp~21=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375] COND TRUE 0 != main_~tmp___1~8 [L4359] assume -2147483648 <= main_#t~nondet393 && main_#t~nondet393 <= 2147483647; [L4359] main_~tmp___0~13 := main_#t~nondet393; [L4359] havoc main_#t~nondet393; [L4361] main_#t~switch394 := 0 == main_~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4360-L4371] COND TRUE main_#t~switch394 [L4362] FCALL call ldv_handler_precall(); [L4363] virtblk_ioctl_#in~bdev, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0; [L4363] havoc virtblk_ioctl_#res; [L4363] havoc virtblk_ioctl_#t~mem264, virtblk_ioctl_#t~mem265, virtblk_ioctl_#t~ret266, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~mem268, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~mem270, virtblk_ioctl_#t~ret271, virtblk_ioctl_~bdev, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0, virtblk_ioctl_~vblk~3, virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4009-L4056] virtblk_ioctl_~bdev := virtblk_ioctl_#in~bdev; [L4009-L4056] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4009-L4056] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4009-L4056] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4012] havoc virtblk_ioctl_~disk~0; [L4013] havoc virtblk_ioctl_~vblk~3; [L4014] havoc virtblk_ioctl_~usr_data~0; [L4015] FCALL call virtblk_ioctl_~#id_str~0 := #Ultimate.alloc(20); [L4016] havoc virtblk_ioctl_~err~1; [L4017] havoc virtblk_ioctl_~tmp~16; [L4018] havoc virtblk_ioctl_~tmp___0~10; [L4019] havoc virtblk_ioctl_~tmp___1~6; [L4020] havoc virtblk_ioctl_~tmp___2~2; [L4023] FCALL call virtblk_ioctl_#t~mem264 := read~$Pointer$({ base: virtblk_ioctl_~bdev!base, offset: 240 + virtblk_ioctl_~bdev!offset }, 8); [L4023] virtblk_ioctl_~disk~0 := virtblk_ioctl_#t~mem264; [L4023] havoc virtblk_ioctl_#t~mem264; [L4024] FCALL call virtblk_ioctl_#t~mem265 := read~$Pointer$({ base: virtblk_ioctl_~disk~0!base, offset: 1075 + virtblk_ioctl_~disk~0!offset }, 8); [L4024] virtblk_ioctl_~vblk~3 := virtblk_ioctl_#t~mem265; [L4024] havoc virtblk_ioctl_#t~mem265; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4025] COND TRUE 1447184708 == virtblk_ioctl_~cmd % 4294967296 [L4026] virtblk_ioctl_~usr_data~0 := { base: 0, offset: (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L4027] virtblk_get_id_#in~disk, virtblk_get_id_#in~id_str := virtblk_ioctl_~disk~0, virtblk_ioctl_~#id_str~0; [L4027] havoc virtblk_get_id_#res; [L4027] havoc virtblk_get_id_#t~mem249, virtblk_get_id_#t~mem250, virtblk_get_id_#t~mem251, virtblk_get_id_#t~ret252, virtblk_get_id_#t~ret253, virtblk_get_id_#t~ret254, virtblk_get_id_#t~mem255, virtblk_get_id_#t~mem256, virtblk_get_id_#t~ret257, virtblk_get_id_#t~ret258, virtblk_get_id_#t~ret259, virtblk_get_id_#t~mem260, virtblk_get_id_#t~mem261, virtblk_get_id_#t~mem262, virtblk_get_id_#t~ret263, virtblk_get_id_~disk, virtblk_get_id_~id_str, virtblk_get_id_~vblk~2, virtblk_get_id_~req~1, virtblk_get_id_~bio~0, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1; [L3974-L4008] virtblk_get_id_~disk := virtblk_get_id_#in~disk; [L3974-L4008] virtblk_get_id_~id_str := virtblk_get_id_#in~id_str; [L3976] havoc virtblk_get_id_~vblk~2; [L3977] havoc virtblk_get_id_~req~1; [L3978] havoc virtblk_get_id_~bio~0; [L3979] havoc virtblk_get_id_~tmp~15; [L3980] havoc virtblk_get_id_~tmp___0~9; [L3981] havoc virtblk_get_id_~tmp___1~5; [L3982] havoc virtblk_get_id_~tmp___2~1; [L3983] havoc virtblk_get_id_~tmp___3~1; [L3986] FCALL call virtblk_get_id_#t~mem249 := read~$Pointer$({ base: virtblk_get_id_~disk!base, offset: 1075 + virtblk_get_id_~disk!offset }, 8); [L3986] virtblk_get_id_~vblk~2 := virtblk_get_id_#t~mem249; [L3986] havoc virtblk_get_id_#t~mem249; [L3987] FCALL call virtblk_get_id_#t~mem250 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L3987] FCALL call virtblk_get_id_#t~mem251 := read~$Pointer$({ base: virtblk_get_id_#t~mem250!base, offset: 1067 + virtblk_get_id_#t~mem250!offset }, 8); [L3987] FCALL call virtblk_get_id_#t~ret252 := bio_map_kern(virtblk_get_id_#t~mem251, virtblk_get_id_~id_str, 20, 208); [L3987] virtblk_get_id_~bio~0 := virtblk_get_id_#t~ret252; [L3987] havoc virtblk_get_id_#t~mem251; [L3987] havoc virtblk_get_id_#t~ret252; [L3987] havoc virtblk_get_id_#t~mem250; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] CALL call virtblk_get_id_#t~ret253 := IS_ERR(virtblk_get_id_~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3988] RET call virtblk_get_id_#t~ret253 := IS_ERR(virtblk_get_id_~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret253=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] assume -9223372036854775808 <= virtblk_get_id_#t~ret253 && virtblk_get_id_#t~ret253 <= 9223372036854775807; [L3988] virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret253; [L3988] havoc virtblk_get_id_#t~ret253; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3989] COND FALSE !(0 != virtblk_get_id_~tmp___0~9) [L3995] FCALL call virtblk_get_id_#t~mem255 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L3995] FCALL call virtblk_get_id_#t~mem256 := read~$Pointer$({ base: virtblk_get_id_#t~mem255!base, offset: 1067 + virtblk_get_id_#t~mem255!offset }, 8); [L3995] ldv_blk_make_request_5_#in~ldv_func_arg1, ldv_blk_make_request_5_#in~ldv_func_arg2, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem256, virtblk_get_id_~bio~0, 208; [L3995] havoc ldv_blk_make_request_5_#res; [L3995] havoc ldv_blk_make_request_5_#t~ret401, ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0, ldv_blk_make_request_5_~tmp~25; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg1 := ldv_blk_make_request_5_#in~ldv_func_arg1; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg2 := ldv_blk_make_request_5_#in~ldv_func_arg2; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4418] havoc ldv_blk_make_request_5_~ldv_func_res~0; [L4419] havoc ldv_blk_make_request_5_~tmp~25; [L4422] FCALL call ldv_blk_make_request_5_#t~ret401 := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3); [L4422] ldv_blk_make_request_5_~tmp~25 := ldv_blk_make_request_5_#t~ret401; [L4422] havoc ldv_blk_make_request_5_#t~ret401; [L4423] ldv_blk_make_request_5_~ldv_func_res~0 := ldv_blk_make_request_5_~tmp~25; [L4424] ldv_get_blk_rq_#in~res, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0, ldv_blk_make_request_5_~ldv_func_arg3; [L4424] havoc ldv_get_blk_rq_#t~ret404, ldv_get_blk_rq_~res, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28; [L4497-L4522] ldv_get_blk_rq_~res := ldv_get_blk_rq_#in~res; [L4497-L4522] ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask; [L4499] havoc ldv_get_blk_rq_~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem255!base=18446744073709551616, virtblk_get_id_#t~mem255!offset=-1534, virtblk_get_id_#t~mem256!base=44, virtblk_get_id_#t~mem256!offset=54, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4502] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem255!base=18446744073709551616, virtblk_get_id_#t~mem255!offset=-1534, virtblk_get_id_#t~mem256!base=44, virtblk_get_id_#t~mem256!offset=54, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4507] COND TRUE (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296 [L4508] ~ldv_blk_rq~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem255!base=18446744073709551616, virtblk_get_id_#t~mem255!offset=-1534, virtblk_get_id_#t~mem256!base=44, virtblk_get_id_#t~mem256!offset=54, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4425] ldv_blk_make_request_5_#res := ldv_blk_make_request_5_~ldv_func_res~0; [L3995] virtblk_get_id_#t~ret257 := ldv_blk_make_request_5_#res; [L3995] virtblk_get_id_~req~1 := virtblk_get_id_#t~ret257; [L3995] havoc virtblk_get_id_#t~ret257; [L3995] havoc virtblk_get_id_#t~mem256; [L3995] havoc virtblk_get_id_#t~mem255; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] CALL call virtblk_get_id_#t~ret258 := IS_ERR(virtblk_get_id_~req~1); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=18446744073709551616, ~ptr!offset=1] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=18446744073709551616, ~ptr!offset=1] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3996] RET call virtblk_get_id_#t~ret258 := IS_ERR(virtblk_get_id_~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret258=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] assume -9223372036854775808 <= virtblk_get_id_#t~ret258 && virtblk_get_id_#t~ret258 <= 9223372036854775807; [L3996] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret258; [L3996] havoc virtblk_get_id_#t~ret258; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3997] COND FALSE !(0 != virtblk_get_id_~tmp___2~1) [L4004] FCALL call write~int(7, { base: virtblk_get_id_~req~1!base, offset: 64 + virtblk_get_id_~req~1!offset }, 4); [L4005] FCALL call virtblk_get_id_#t~mem260 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4005] FCALL call virtblk_get_id_#t~mem261 := read~$Pointer$({ base: virtblk_get_id_#t~mem260!base, offset: 1067 + virtblk_get_id_#t~mem260!offset }, 8); [L4005] FCALL call virtblk_get_id_#t~mem262 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4005] FCALL call virtblk_get_id_#t~ret263 := blk_execute_rq(virtblk_get_id_#t~mem261, virtblk_get_id_#t~mem262, virtblk_get_id_~req~1, 0); [L4005] assume -2147483648 <= virtblk_get_id_#t~ret263 && virtblk_get_id_#t~ret263 <= 2147483647; [L4005] virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret263; [L4005] havoc virtblk_get_id_#t~mem261; [L4005] havoc virtblk_get_id_#t~mem262; [L4005] havoc virtblk_get_id_#t~ret263; [L4005] havoc virtblk_get_id_#t~mem260; [L4006] virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4027] virtblk_ioctl_#t~ret266 := virtblk_get_id_#res; [L4027] assume -2147483648 <= virtblk_ioctl_#t~ret266 && virtblk_ioctl_#t~ret266 <= 2147483647; [L4027] virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret266; [L4027] havoc virtblk_ioctl_#t~ret266; [L4028] COND TRUE 0 == virtblk_ioctl_~err~1 [L4029] copy_to_user_#in~dst, copy_to_user_#in~src, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, 20; [L4029] havoc copy_to_user_#res; [L4029] havoc copy_to_user_#t~ret33, copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size, copy_to_user_~tmp~0; [L3215-L3224] copy_to_user_~dst := copy_to_user_#in~dst; [L3215-L3224] copy_to_user_~src := copy_to_user_#in~src; [L3215-L3224] copy_to_user_~size := copy_to_user_#in~size; [L3217] havoc copy_to_user_~tmp~0; [L3220] FCALL call might_fault(); [L3221] FCALL call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size); [L3221] copy_to_user_~tmp~0 := copy_to_user_#t~ret33; [L3221] havoc copy_to_user_#t~ret33; [L3222] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4029] virtblk_ioctl_#t~ret267 := copy_to_user_#res; [L4029] assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647; [L4029] virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret267; [L4029] havoc virtblk_ioctl_#t~ret267; [L4030] COND TRUE 0 != virtblk_ioctl_~tmp~16 [L4031] virtblk_ioctl_~err~1 := -14; [L4038] virtblk_ioctl_#res := virtblk_ioctl_~err~1; [L4015] FCALL call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0); [L4038] havoc virtblk_ioctl_~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4363] main_#t~ret395 := virtblk_ioctl_#res; [L4363] assume -2147483648 <= main_#t~ret395 && main_#t~ret395 <= 2147483647; [L4363] havoc main_#t~ret395; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647; [L4374] main_~tmp___1~8 := main_#t~nondet397; [L4374] havoc main_#t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375] COND FALSE !(0 != main_~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4542] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4545] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5); [L4180] FCALL call write~init~int(118, { base: #t~string306!base, offset: #t~string306!offset }, 1); [L4180] FCALL call write~init~int(100, { base: #t~string306!base, offset: 1 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(37, { base: #t~string306!base, offset: 2 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(99, { base: #t~string306!base, offset: 3 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(0, { base: #t~string306!base, offset: 4 + #t~string306!offset }, 1); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7); [L4183] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4183] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 5 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(0, { base: #t~string309!base, offset: 6 + #t~string309!offset }, 1); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4299-L4302] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4297-L4298] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4330] ~__mod_virtio_device_table~0!device := 0; [L4330] ~__mod_virtio_device_table~0!vendor := 0; [?] havoc main_#res; [?] havoc main_#t~ret392, main_#t~nondet393, main_#t~switch394, main_#t~ret395, main_#t~ret396, main_#t~nondet397, main_~var_group1~0, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8; [L4338] havoc main_~var_group1~0; [L4339] havoc main_~var_virtblk_ioctl_5_p1~0; [L4340] havoc main_~var_virtblk_ioctl_5_p2~0; [L4341] havoc main_~var_virtblk_ioctl_5_p3~0; [L4342] havoc main_~var_group2~0; [L4343] havoc main_~tmp~21; [L4344] havoc main_~tmp___0~13; [L4345] havoc main_~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); [L4351] havoc init_#res; [L4351] havoc init_#t~ret389, init_#t~ret390, init_~tmp~20; [L4307] havoc init_~tmp~20; [L4310] FCALL call init_#t~ret389 := register_blkdev(0, #t~string388); [L4310] assume -2147483648 <= init_#t~ret389 && init_#t~ret389 <= 2147483647; [L4310] ~major~0 := init_#t~ret389; [L4310] havoc init_#t~ret389; [L4311] COND FALSE !(~major~0 < 0) [L4316] FCALL call init_#t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647; [L4316] init_~tmp~20 := init_#t~ret390; [L4316] havoc init_#t~ret390; [L4317] init_#res := init_~tmp~20; [L4351] main_#t~ret392 := init_#res; [L4351] assume -2147483648 <= main_#t~ret392 && main_#t~ret392 <= 2147483647; [L4351] main_~tmp~21 := main_#t~ret392; [L4351] havoc main_#t~ret392; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4352] COND FALSE !(0 != main_~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647; [L4374] main_~tmp___1~8 := main_#t~nondet397; [L4374] havoc main_#t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_~tmp___1~8=1, main_~tmp~21=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375] COND TRUE 0 != main_~tmp___1~8 [L4359] assume -2147483648 <= main_#t~nondet393 && main_#t~nondet393 <= 2147483647; [L4359] main_~tmp___0~13 := main_#t~nondet393; [L4359] havoc main_#t~nondet393; [L4361] main_#t~switch394 := 0 == main_~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4360-L4371] COND TRUE main_#t~switch394 [L4362] FCALL call ldv_handler_precall(); [L4363] virtblk_ioctl_#in~bdev, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0; [L4363] havoc virtblk_ioctl_#res; [L4363] havoc virtblk_ioctl_#t~mem264, virtblk_ioctl_#t~mem265, virtblk_ioctl_#t~ret266, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~mem268, virtblk_ioctl_#t~ret269, virtblk_ioctl_#t~mem270, virtblk_ioctl_#t~ret271, virtblk_ioctl_~bdev, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0, virtblk_ioctl_~vblk~3, virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, virtblk_ioctl_~err~1, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4009-L4056] virtblk_ioctl_~bdev := virtblk_ioctl_#in~bdev; [L4009-L4056] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4009-L4056] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4009-L4056] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4012] havoc virtblk_ioctl_~disk~0; [L4013] havoc virtblk_ioctl_~vblk~3; [L4014] havoc virtblk_ioctl_~usr_data~0; [L4015] FCALL call virtblk_ioctl_~#id_str~0 := #Ultimate.alloc(20); [L4016] havoc virtblk_ioctl_~err~1; [L4017] havoc virtblk_ioctl_~tmp~16; [L4018] havoc virtblk_ioctl_~tmp___0~10; [L4019] havoc virtblk_ioctl_~tmp___1~6; [L4020] havoc virtblk_ioctl_~tmp___2~2; [L4023] FCALL call virtblk_ioctl_#t~mem264 := read~$Pointer$({ base: virtblk_ioctl_~bdev!base, offset: 240 + virtblk_ioctl_~bdev!offset }, 8); [L4023] virtblk_ioctl_~disk~0 := virtblk_ioctl_#t~mem264; [L4023] havoc virtblk_ioctl_#t~mem264; [L4024] FCALL call virtblk_ioctl_#t~mem265 := read~$Pointer$({ base: virtblk_ioctl_~disk~0!base, offset: 1075 + virtblk_ioctl_~disk~0!offset }, 8); [L4024] virtblk_ioctl_~vblk~3 := virtblk_ioctl_#t~mem265; [L4024] havoc virtblk_ioctl_#t~mem265; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4025] COND TRUE 1447184708 == virtblk_ioctl_~cmd % 4294967296 [L4026] virtblk_ioctl_~usr_data~0 := { base: 0, offset: (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L4027] virtblk_get_id_#in~disk, virtblk_get_id_#in~id_str := virtblk_ioctl_~disk~0, virtblk_ioctl_~#id_str~0; [L4027] havoc virtblk_get_id_#res; [L4027] havoc virtblk_get_id_#t~mem249, virtblk_get_id_#t~mem250, virtblk_get_id_#t~mem251, virtblk_get_id_#t~ret252, virtblk_get_id_#t~ret253, virtblk_get_id_#t~ret254, virtblk_get_id_#t~mem255, virtblk_get_id_#t~mem256, virtblk_get_id_#t~ret257, virtblk_get_id_#t~ret258, virtblk_get_id_#t~ret259, virtblk_get_id_#t~mem260, virtblk_get_id_#t~mem261, virtblk_get_id_#t~mem262, virtblk_get_id_#t~ret263, virtblk_get_id_~disk, virtblk_get_id_~id_str, virtblk_get_id_~vblk~2, virtblk_get_id_~req~1, virtblk_get_id_~bio~0, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1, virtblk_get_id_~tmp___3~1; [L3974-L4008] virtblk_get_id_~disk := virtblk_get_id_#in~disk; [L3974-L4008] virtblk_get_id_~id_str := virtblk_get_id_#in~id_str; [L3976] havoc virtblk_get_id_~vblk~2; [L3977] havoc virtblk_get_id_~req~1; [L3978] havoc virtblk_get_id_~bio~0; [L3979] havoc virtblk_get_id_~tmp~15; [L3980] havoc virtblk_get_id_~tmp___0~9; [L3981] havoc virtblk_get_id_~tmp___1~5; [L3982] havoc virtblk_get_id_~tmp___2~1; [L3983] havoc virtblk_get_id_~tmp___3~1; [L3986] FCALL call virtblk_get_id_#t~mem249 := read~$Pointer$({ base: virtblk_get_id_~disk!base, offset: 1075 + virtblk_get_id_~disk!offset }, 8); [L3986] virtblk_get_id_~vblk~2 := virtblk_get_id_#t~mem249; [L3986] havoc virtblk_get_id_#t~mem249; [L3987] FCALL call virtblk_get_id_#t~mem250 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L3987] FCALL call virtblk_get_id_#t~mem251 := read~$Pointer$({ base: virtblk_get_id_#t~mem250!base, offset: 1067 + virtblk_get_id_#t~mem250!offset }, 8); [L3987] FCALL call virtblk_get_id_#t~ret252 := bio_map_kern(virtblk_get_id_#t~mem251, virtblk_get_id_~id_str, 20, 208); [L3987] virtblk_get_id_~bio~0 := virtblk_get_id_#t~ret252; [L3987] havoc virtblk_get_id_#t~mem251; [L3987] havoc virtblk_get_id_#t~ret252; [L3987] havoc virtblk_get_id_#t~mem250; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] CALL call virtblk_get_id_#t~ret253 := IS_ERR(virtblk_get_id_~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3988] RET call virtblk_get_id_#t~ret253 := IS_ERR(virtblk_get_id_~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret253=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] assume -9223372036854775808 <= virtblk_get_id_#t~ret253 && virtblk_get_id_#t~ret253 <= 9223372036854775807; [L3988] virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret253; [L3988] havoc virtblk_get_id_#t~ret253; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3989] COND FALSE !(0 != virtblk_get_id_~tmp___0~9) [L3995] FCALL call virtblk_get_id_#t~mem255 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L3995] FCALL call virtblk_get_id_#t~mem256 := read~$Pointer$({ base: virtblk_get_id_#t~mem255!base, offset: 1067 + virtblk_get_id_#t~mem255!offset }, 8); [L3995] ldv_blk_make_request_5_#in~ldv_func_arg1, ldv_blk_make_request_5_#in~ldv_func_arg2, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem256, virtblk_get_id_~bio~0, 208; [L3995] havoc ldv_blk_make_request_5_#res; [L3995] havoc ldv_blk_make_request_5_#t~ret401, ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0, ldv_blk_make_request_5_~tmp~25; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg1 := ldv_blk_make_request_5_#in~ldv_func_arg1; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg2 := ldv_blk_make_request_5_#in~ldv_func_arg2; [L4415-L4427] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4418] havoc ldv_blk_make_request_5_~ldv_func_res~0; [L4419] havoc ldv_blk_make_request_5_~tmp~25; [L4422] FCALL call ldv_blk_make_request_5_#t~ret401 := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3); [L4422] ldv_blk_make_request_5_~tmp~25 := ldv_blk_make_request_5_#t~ret401; [L4422] havoc ldv_blk_make_request_5_#t~ret401; [L4423] ldv_blk_make_request_5_~ldv_func_res~0 := ldv_blk_make_request_5_~tmp~25; [L4424] ldv_get_blk_rq_#in~res, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0, ldv_blk_make_request_5_~ldv_func_arg3; [L4424] havoc ldv_get_blk_rq_#t~ret404, ldv_get_blk_rq_~res, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28; [L4497-L4522] ldv_get_blk_rq_~res := ldv_get_blk_rq_#in~res; [L4497-L4522] ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask; [L4499] havoc ldv_get_blk_rq_~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem255!base=18446744073709551616, virtblk_get_id_#t~mem255!offset=-1534, virtblk_get_id_#t~mem256!base=44, virtblk_get_id_#t~mem256!offset=54, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4502] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem255!base=18446744073709551616, virtblk_get_id_#t~mem255!offset=-1534, virtblk_get_id_#t~mem256!base=44, virtblk_get_id_#t~mem256!offset=54, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4507] COND TRUE (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296 [L4508] ~ldv_blk_rq~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem255!base=18446744073709551616, virtblk_get_id_#t~mem255!offset=-1534, virtblk_get_id_#t~mem256!base=44, virtblk_get_id_#t~mem256!offset=54, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4425] ldv_blk_make_request_5_#res := ldv_blk_make_request_5_~ldv_func_res~0; [L3995] virtblk_get_id_#t~ret257 := ldv_blk_make_request_5_#res; [L3995] virtblk_get_id_~req~1 := virtblk_get_id_#t~ret257; [L3995] havoc virtblk_get_id_#t~ret257; [L3995] havoc virtblk_get_id_#t~mem256; [L3995] havoc virtblk_get_id_#t~mem255; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] CALL call virtblk_get_id_#t~ret258 := IS_ERR(virtblk_get_id_~req~1); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=18446744073709551616, ~ptr!offset=1] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=18446744073709551616, ~ptr!offset=1] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3996] RET call virtblk_get_id_#t~ret258 := IS_ERR(virtblk_get_id_~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret258=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] assume -9223372036854775808 <= virtblk_get_id_#t~ret258 && virtblk_get_id_#t~ret258 <= 9223372036854775807; [L3996] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret258; [L3996] havoc virtblk_get_id_#t~ret258; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3997] COND FALSE !(0 != virtblk_get_id_~tmp___2~1) [L4004] FCALL call write~int(7, { base: virtblk_get_id_~req~1!base, offset: 64 + virtblk_get_id_~req~1!offset }, 4); [L4005] FCALL call virtblk_get_id_#t~mem260 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4005] FCALL call virtblk_get_id_#t~mem261 := read~$Pointer$({ base: virtblk_get_id_#t~mem260!base, offset: 1067 + virtblk_get_id_#t~mem260!offset }, 8); [L4005] FCALL call virtblk_get_id_#t~mem262 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L4005] FCALL call virtblk_get_id_#t~ret263 := blk_execute_rq(virtblk_get_id_#t~mem261, virtblk_get_id_#t~mem262, virtblk_get_id_~req~1, 0); [L4005] assume -2147483648 <= virtblk_get_id_#t~ret263 && virtblk_get_id_#t~ret263 <= 2147483647; [L4005] virtblk_get_id_~tmp___3~1 := virtblk_get_id_#t~ret263; [L4005] havoc virtblk_get_id_#t~mem261; [L4005] havoc virtblk_get_id_#t~mem262; [L4005] havoc virtblk_get_id_#t~ret263; [L4005] havoc virtblk_get_id_#t~mem260; [L4006] virtblk_get_id_#res := virtblk_get_id_~tmp___3~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_~#id_str~0!base=35, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~mode=82, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4027] virtblk_ioctl_#t~ret266 := virtblk_get_id_#res; [L4027] assume -2147483648 <= virtblk_ioctl_#t~ret266 && virtblk_ioctl_#t~ret266 <= 2147483647; [L4027] virtblk_ioctl_~err~1 := virtblk_ioctl_#t~ret266; [L4027] havoc virtblk_ioctl_#t~ret266; [L4028] COND TRUE 0 == virtblk_ioctl_~err~1 [L4029] copy_to_user_#in~dst, copy_to_user_#in~src, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, 20; [L4029] havoc copy_to_user_#res; [L4029] havoc copy_to_user_#t~ret33, copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size, copy_to_user_~tmp~0; [L3215-L3224] copy_to_user_~dst := copy_to_user_#in~dst; [L3215-L3224] copy_to_user_~src := copy_to_user_#in~src; [L3215-L3224] copy_to_user_~size := copy_to_user_#in~size; [L3217] havoc copy_to_user_~tmp~0; [L3220] FCALL call might_fault(); [L3221] FCALL call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size); [L3221] copy_to_user_~tmp~0 := copy_to_user_#t~ret33; [L3221] havoc copy_to_user_#t~ret33; [L3222] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4029] virtblk_ioctl_#t~ret267 := copy_to_user_#res; [L4029] assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647; [L4029] virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret267; [L4029] havoc virtblk_ioctl_#t~ret267; [L4030] COND TRUE 0 != virtblk_ioctl_~tmp~16 [L4031] virtblk_ioctl_~err~1 := -14; [L4038] virtblk_ioctl_#res := virtblk_ioctl_~err~1; [L4015] FCALL call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0); [L4038] havoc virtblk_ioctl_~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4363] main_#t~ret395 := virtblk_ioctl_#res; [L4363] assume -2147483648 <= main_#t~ret395 && main_#t~ret395 <= 2147483647; [L4363] havoc main_#t~ret395; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=1, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= main_#t~nondet397 && main_#t~nondet397 <= 2147483647; [L4374] main_~tmp___1~8 := main_#t~nondet397; [L4374] havoc main_#t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375] COND FALSE !(0 != main_~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4542] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=35, copy_to_user_#in~src!offset=0, copy_to_user_#res=1, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=35, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=1, init_#res=0, init_#t~ret390=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=44, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=54, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=18446744073709551616, ldv_blk_make_request_5_#res!offset=1, ldv_blk_make_request_5_~ldv_func_arg1!base=44, ldv_blk_make_request_5_~ldv_func_arg1!offset=54, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=18446744073709551616, ldv_blk_make_request_5_~ldv_func_res~0!offset=1, ldv_blk_make_request_5_~tmp~25!base=18446744073709551616, ldv_blk_make_request_5_~tmp~25!offset=1, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=18446744073709551616, ldv_get_blk_rq_#in~res!offset=1, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=18446744073709551616, ldv_get_blk_rq_~res!offset=1, main_#t~switch394=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=79, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=82, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=18446744073709551616, virtblk_get_id_#in~disk!offset=-1010, virtblk_get_id_#in~id_str!base=35, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=18446744073709551616, virtblk_get_id_~disk!offset=-1010, virtblk_get_id_~id_str!base=35, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=18446744073709551616, virtblk_get_id_~req~1!offset=1, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=0, virtblk_get_id_~tmp___3~1=0, virtblk_get_id_~vblk~2!base=0, virtblk_get_id_~vblk~2!offset=0, virtblk_ioctl_#in~bdev!base=79, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=82, virtblk_ioctl_#res=-14, virtblk_ioctl_#t~ret267=0, virtblk_ioctl_~bdev!base=79, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=18446744073709551616, virtblk_ioctl_~disk~0!offset=-1010, virtblk_ioctl_~err~1=-14, virtblk_ioctl_~mode=82, virtblk_ioctl_~tmp~16=1, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=0, virtblk_ioctl_~vblk~3!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4545] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5); [L4180] FCALL call write~init~int(118, { base: #t~string306!base, offset: #t~string306!offset }, 1); [L4180] FCALL call write~init~int(100, { base: #t~string306!base, offset: 1 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(37, { base: #t~string306!base, offset: 2 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(99, { base: #t~string306!base, offset: 3 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(0, { base: #t~string306!base, offset: 4 + #t~string306!offset }, 1); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7); [L4183] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4183] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 5 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(0, { base: #t~string309!base, offset: 6 + #t~string309!offset }, 1); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4299-L4302] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4297-L4298] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4330] ~__mod_virtio_device_table~0!device := 0; [L4330] ~__mod_virtio_device_table~0!vendor := 0; [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0, #t~string388); [L4310] assume -2147483648 <= #t~ret389 && #t~ret389 <= 2147483647; [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; [L4311] COND FALSE !(~major~0 < 0) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; [L4351] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4352] COND FALSE !(0 != ~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375] COND TRUE 0 != ~tmp___1~8 [L4359] assume -2147483648 <= #t~nondet393 && #t~nondet393 <= 2147483647; [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0 == ~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4025] COND TRUE 1447184708 == ~cmd % 4294967296 [L4026] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: 1067 + #t~mem250!offset }, 8); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20, 208); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~mem251; [L3987] havoc #t~ret252; [L3987] havoc #t~mem250; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] assume -9223372036854775808 <= #t~ret253 && #t~ret253 <= 9223372036854775807; [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3989] COND FALSE !(0 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: 1067 + #t~mem255!offset }, 8); [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4502] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4507] COND TRUE (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296 [L4508] ~ldv_blk_rq~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4425] #res := ~ldv_func_res~0; [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem256; [L3995] havoc #t~mem255; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=18446744073709551616, ~ptr!offset=1] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=18446744073709551616, ~ptr!offset=1] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] assume -9223372036854775808 <= #t~ret258 && #t~ret258 <= 9223372036854775807; [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3997] COND FALSE !(0 != ~tmp___2~1) [L4004] FCALL call write~int(7, { base: ~req~1!base, offset: 64 + ~req~1!offset }, 4); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: 1067 + #t~mem260!offset }, 8); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0); [L4005] assume -2147483648 <= #t~ret263 && #t~ret263 <= 2147483647; [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~mem261; [L4005] havoc #t~mem262; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4006] #res := ~tmp___3~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4027] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; [L4028] COND TRUE 0 == ~err~1 [L3215-L3224] ~dst := #in~dst; [L3215-L3224] ~src := #in~src; [L3215-L3224] ~size := #in~size; [L3217] havoc ~tmp~0; [L3220] FCALL call might_fault(); [L3221] FCALL call #t~ret33 := _copy_to_user(~dst, ~src, ~size); [L3221] ~tmp~0 := #t~ret33; [L3221] havoc #t~ret33; [L3222] #res := (if ~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then ~tmp~0 % 18446744073709551616 % 4294967296 else ~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4029] assume -2147483648 <= #t~ret267 && #t~ret267 <= 2147483647; [L4029] ~tmp~16 := #t~ret267; [L4029] havoc #t~ret267; [L4030] COND TRUE 0 != ~tmp~16 [L4031] ~err~1 := -14; [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4363] assume -2147483648 <= #t~ret395 && #t~ret395 <= 2147483647; [L4363] havoc #t~ret395; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375] COND FALSE !(0 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4542] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4545] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] ----- [2018-11-23 13:22:53,050 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,050 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,051 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,052 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,052 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,052 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,053 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,053 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,054 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,054 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,054 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,054 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,055 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,055 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,056 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,056 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,056 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,057 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,057 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,057 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,058 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,058 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,059 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,059 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,059 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,060 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,060 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,060 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,061 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,061 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,061 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,062 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,062 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,062 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,063 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,063 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 13:22:53,064 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 13:22:53,064 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3325] FCALL call #t~string108 := #Ultimate.alloc(28); [L4142] FCALL call #t~string289 := #Ultimate.alloc(22); [L4146] FCALL call #t~string292 := #Ultimate.alloc(9); [L4180] FCALL call #t~string306 := #Ultimate.alloc(5); [L4180] FCALL call write~init~int(118, { base: #t~string306!base, offset: #t~string306!offset }, 1); [L4180] FCALL call write~init~int(100, { base: #t~string306!base, offset: 1 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(37, { base: #t~string306!base, offset: 2 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(99, { base: #t~string306!base, offset: 3 + #t~string306!offset }, 1); [L4180] FCALL call write~init~int(0, { base: #t~string306!base, offset: 4 + #t~string306!offset }, 1); [L4183] FCALL call #t~string309 := #Ultimate.alloc(7); [L4183] FCALL call write~init~int(118, { base: #t~string309!base, offset: #t~string309!offset }, 1); [L4183] FCALL call write~init~int(100, { base: #t~string309!base, offset: 1 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 2 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 3 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(37, { base: #t~string309!base, offset: 4 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(99, { base: #t~string309!base, offset: 5 + #t~string309!offset }, 1); [L4183] FCALL call write~init~int(0, { base: #t~string309!base, offset: 6 + #t~string309!offset }, 1); [L4188] FCALL call #t~string312 := #Ultimate.alloc(9); [L4303] FCALL call #t~string387 := #Ultimate.alloc(11); [L4310] FCALL call #t~string388 := #Ultimate.alloc(8); [L4325] FCALL call #t~string391 := #Ultimate.alloc(8); [L3726] ~major~0 := 0; [L3727] ~index~0 := 0; [L4299-L4302] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4299-L4302] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4299-L4302] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4335] ~LDV_IN_INTERRUPT~0 := 0; [L4496] ~ldv_blk_rq~0 := 0; [L4080-L4081] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4080-L4081] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4297-L4298] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4297-L4298] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4297-L4298] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4303-L4304] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4303-L4304] FCALL call write~init~$Pointer$(#t~string387, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4303-L4304] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4330] ~__mod_virtio_device_table~0!device := 0; [L4330] ~__mod_virtio_device_table~0!vendor := 0; [L4338] havoc ~var_group1~0; [L4339] havoc ~var_virtblk_ioctl_5_p1~0; [L4340] havoc ~var_virtblk_ioctl_5_p2~0; [L4341] havoc ~var_virtblk_ioctl_5_p3~0; [L4342] havoc ~var_group2~0; [L4343] havoc ~tmp~21; [L4344] havoc ~tmp___0~13; [L4345] havoc ~tmp___1~8; [L4348] ~LDV_IN_INTERRUPT~0 := 1; [L4349] FCALL call ldv_initialize(); [L4350] FCALL call ldv_handler_precall(); [L4307] havoc ~tmp~20; [L4310] FCALL call #t~ret389 := register_blkdev(0, #t~string388); [L4310] assume -2147483648 <= #t~ret389 && #t~ret389 <= 2147483647; [L4310] ~major~0 := #t~ret389; [L4310] havoc #t~ret389; [L4311] COND FALSE !(~major~0 < 0) [L4316] FCALL call #t~ret390 := register_virtio_driver(~#virtio_blk~0); [L4316] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4316] ~tmp~20 := #t~ret390; [L4316] havoc #t~ret390; [L4317] #res := ~tmp~20; [L4351] assume -2147483648 <= #t~ret392 && #t~ret392 <= 2147483647; [L4351] ~tmp~21 := #t~ret392; [L4351] havoc #t~ret392; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4352] COND FALSE !(0 != ~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375] COND TRUE 0 != ~tmp___1~8 [L4359] assume -2147483648 <= #t~nondet393 && #t~nondet393 <= 2147483647; [L4359] ~tmp___0~13 := #t~nondet393; [L4359] havoc #t~nondet393; [L4361] #t~switch394 := 0 == ~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4360-L4371] COND TRUE #t~switch394 [L4362] FCALL call ldv_handler_precall(); [L4009-L4056] ~bdev := #in~bdev; [L4009-L4056] ~mode := #in~mode; [L4009-L4056] ~cmd := #in~cmd; [L4009-L4056] ~data := #in~data; [L4012] havoc ~disk~0; [L4013] havoc ~vblk~3; [L4014] havoc ~usr_data~0; [L4015] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4016] havoc ~err~1; [L4017] havoc ~tmp~16; [L4018] havoc ~tmp___0~10; [L4019] havoc ~tmp___1~6; [L4020] havoc ~tmp___2~2; [L4023] FCALL call #t~mem264 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4023] ~disk~0 := #t~mem264; [L4023] havoc #t~mem264; [L4024] FCALL call #t~mem265 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4024] ~vblk~3 := #t~mem265; [L4024] havoc #t~mem265; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4025] COND TRUE 1447184708 == ~cmd % 4294967296 [L4026] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L3974-L4008] ~disk := #in~disk; [L3974-L4008] ~id_str := #in~id_str; [L3976] havoc ~vblk~2; [L3977] havoc ~req~1; [L3978] havoc ~bio~0; [L3979] havoc ~tmp~15; [L3980] havoc ~tmp___0~9; [L3981] havoc ~tmp___1~5; [L3982] havoc ~tmp___2~1; [L3983] havoc ~tmp___3~1; [L3986] FCALL call #t~mem249 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L3986] ~vblk~2 := #t~mem249; [L3986] havoc #t~mem249; [L3987] FCALL call #t~mem250 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3987] FCALL call #t~mem251 := read~$Pointer$({ base: #t~mem250!base, offset: 1067 + #t~mem250!offset }, 8); [L3987] FCALL call #t~ret252 := bio_map_kern(#t~mem251, ~id_str, 20, 208); [L3987] ~bio~0 := #t~ret252; [L3987] havoc #t~mem251; [L3987] havoc #t~ret252; [L3987] havoc #t~mem250; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] CALL call #t~ret253 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=0, ~ptr!offset=0] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3988] RET call #t~ret253 := IS_ERR(~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3988] assume -9223372036854775808 <= #t~ret253 && #t~ret253 <= 9223372036854775807; [L3988] ~tmp___0~9 := #t~ret253; [L3988] havoc #t~ret253; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3989] COND FALSE !(0 != ~tmp___0~9) [L3995] FCALL call #t~mem255 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3995] FCALL call #t~mem256 := read~$Pointer$({ base: #t~mem255!base, offset: 1067 + #t~mem255!offset }, 8); [L4415-L4427] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4415-L4427] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4415-L4427] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4418] havoc ~ldv_func_res~0; [L4419] havoc ~tmp~25; [L4422] FCALL call #t~ret401 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4422] ~tmp~25 := #t~ret401; [L4422] havoc #t~ret401; [L4423] ~ldv_func_res~0 := ~tmp~25; [L4497-L4522] ~res := #in~res; [L4497-L4522] ~mask := #in~mask; [L4499] havoc ~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4502] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4507] COND TRUE (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296 [L4508] ~ldv_blk_rq~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4425] #res := ~ldv_func_res~0; [L3995] ~req~1 := #t~ret257; [L3995] havoc #t~ret257; [L3995] havoc #t~mem256; [L3995] havoc #t~mem255; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] CALL call #t~ret258 := IS_ERR(~req~1); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4406-L4414] ~ptr := #in~ptr; [L4408] havoc ~tmp~24; VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=18446744073709551616, ~ptr!offset=1] [L4411] CALL call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4444-L4451] ~ptr := #in~ptr; [L4449] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4411] RET call #t~ret400 := ldv_is_err(~ptr); VAL [#in~ptr!base=18446744073709551616, #in~ptr!offset=1, #NULL!base=0, #NULL!offset=0, #t~ret400=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1, ~ptr!base=18446744073709551616, ~ptr!offset=1] [L4411] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4411] ~tmp~24 := #t~ret400; [L4411] havoc #t~ret400; [L4412] #res := ~tmp~24; [L3996] RET call #t~ret258 := IS_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3996] assume -9223372036854775808 <= #t~ret258 && #t~ret258 <= 9223372036854775807; [L3996] ~tmp___2~1 := #t~ret258; [L3996] havoc #t~ret258; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3997] COND FALSE !(0 != ~tmp___2~1) [L4004] FCALL call write~int(7, { base: ~req~1!base, offset: 64 + ~req~1!offset }, 4); [L4005] FCALL call #t~mem260 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~mem261 := read~$Pointer$({ base: #t~mem260!base, offset: 1067 + #t~mem260!offset }, 8); [L4005] FCALL call #t~mem262 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L4005] FCALL call #t~ret263 := blk_execute_rq(#t~mem261, #t~mem262, ~req~1, 0); [L4005] assume -2147483648 <= #t~ret263 && #t~ret263 <= 2147483647; [L4005] ~tmp___3~1 := #t~ret263; [L4005] havoc #t~mem261; [L4005] havoc #t~mem262; [L4005] havoc #t~ret263; [L4005] havoc #t~mem260; [L4006] #res := ~tmp___3~1; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4027] assume -2147483648 <= #t~ret266 && #t~ret266 <= 2147483647; [L4027] ~err~1 := #t~ret266; [L4027] havoc #t~ret266; [L4028] COND TRUE 0 == ~err~1 [L3215-L3224] ~dst := #in~dst; [L3215-L3224] ~src := #in~src; [L3215-L3224] ~size := #in~size; [L3217] havoc ~tmp~0; [L3220] FCALL call might_fault(); [L3221] FCALL call #t~ret33 := _copy_to_user(~dst, ~src, ~size); [L3221] ~tmp~0 := #t~ret33; [L3221] havoc #t~ret33; [L3222] #res := (if ~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then ~tmp~0 % 18446744073709551616 % 4294967296 else ~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4029] assume -2147483648 <= #t~ret267 && #t~ret267 <= 2147483647; [L4029] ~tmp~16 := #t~ret267; [L4029] havoc #t~ret267; [L4030] COND TRUE 0 != ~tmp~16 [L4031] ~err~1 := -14; [L4038] #res := ~err~1; [L4015] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4038] havoc ~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4363] assume -2147483648 <= #t~ret395 && #t~ret395 <= 2147483647; [L4363] havoc #t~ret395; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4374] assume -2147483648 <= #t~nondet397 && #t~nondet397 <= 2147483647; [L4374] ~tmp___1~8 := #t~nondet397; [L4374] havoc #t~nondet397; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4375] COND FALSE !(0 != ~tmp___1~8) [L4381] FCALL call ldv_handler_precall(); [L4325] FCALL call unregister_blkdev(~major~0, #t~string391); [L4326] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4542] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4545] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L4433] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string108!base=23, #t~string108!offset=0, #t~string289!base=42, #t~string289!offset=0, #t~string292!base=26, #t~string292!offset=0, #t~string306!base=39, #t~string306!offset=0, #t~string309!base=25, #t~string309!offset=0, #t~string312!base=34, #t~string312!offset=0, #t~string387!base=30, #t~string387!offset=0, #t~string388!base=13, #t~string388!offset=0, #t~string391!base=29, #t~string391!offset=0, ~#__this_module~0!base=17, ~#__this_module~0!offset=14, ~#features~0!base=31, ~#features~0!offset=0, ~#id_table~0!base=38, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=27, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=18446744073709551616, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=1] [L3726] static int major ; [L3727] static int index ; [L4299-L4302] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4335] int LDV_IN_INTERRUPT ; [L4496] int ldv_blk_rq = 0; [L4080-L4081] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4297-L4298] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4303-L4304] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4330] struct virtio_device_id const __mod_virtio_device_table ; [L4338] struct block_device *var_group1 ; [L4339] fmode_t var_virtblk_ioctl_5_p1 ; [L4340] unsigned int var_virtblk_ioctl_5_p2 ; [L4341] unsigned long var_virtblk_ioctl_5_p3 ; [L4342] struct hd_geometry *var_group2 ; [L4343] int tmp ; [L4344] int tmp___0 ; [L4345] int tmp___1 ; [L4348] LDV_IN_INTERRUPT = 1 [L4307] int tmp ; [L4310] major = register_blkdev(0U, "virtblk") [L4311] COND FALSE !(major < 0) [L4316] tmp = register_virtio_driver(& virtio_blk) [L4317] return (tmp); [L4351] tmp = init() [L4352] COND FALSE !(tmp != 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND TRUE tmp___1 != 0 [L4359] tmp___0 = __VERIFIER_nondet_int() [L4361] case 0: [L4012] struct gendisk *disk ; [L4013] struct virtio_blk *vblk ; [L4014] void *usr_data ; [L4015] char id_str[20U] ; [L4016] int err ; [L4017] int tmp ; [L4018] bool tmp___0 ; [L4019] int tmp___1 ; [L4020] int tmp___2 ; [L4023] EXPR bdev->bd_disk [L4023] disk = bdev->bd_disk [L4024] EXPR disk->private_data [L4024] vblk = (struct virtio_blk *)disk->private_data [L4025] COND TRUE cmd == 1447184708U [L4026] usr_data = (void *)data [L3976] struct virtio_blk *vblk ; [L3977] struct request *req ; [L3978] struct bio *bio ; [L3979] long tmp ; [L3980] long tmp___0 ; [L3981] long tmp___1 ; [L3982] long tmp___2 ; [L3983] int tmp___3 ; [L3986] EXPR disk->private_data [L3986] vblk = (struct virtio_blk *)disk->private_data [L3987] EXPR vblk->disk [L3987] EXPR (vblk->disk)->queue [L3987] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L3988] CALL, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, ptr={0:0}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4408] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, ptr={0:0}, ptr={0:0}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, ptr={0:0}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4449] return ((unsigned long )ptr > 2012UL); [L4411] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=1, ptr={0:0}, ptr={0:0}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); [L3988] RET, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L3988] tmp___0 = IS_ERR((void const *)bio) [L3989] COND FALSE !(tmp___0 != 0L) [L3995] EXPR vblk->disk [L3995] EXPR (vblk->disk)->queue [L4418] ldv_func_ret_type___3 ldv_func_res ; [L4419] struct request *tmp ; [L4422] tmp = blk_make_request(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L4423] ldv_func_res = tmp [L4499] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4502] COND TRUE ldv_blk_rq == 0 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4507] COND TRUE (mask == 16U || mask == 208U) || mask == 16U [L4508] ldv_blk_rq = 1 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4425] return (ldv_func_res); [L3995] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L3996] CALL, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, ptr={18446744073709551616:1}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4408] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, ptr={18446744073709551616:1}, ptr={18446744073709551616:1}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, ptr={18446744073709551616:1}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4449] return ((unsigned long )ptr > 2012UL); [L4411] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=1, ptr={18446744073709551616:1}, ptr={18446744073709551616:1}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); [L3996] RET, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L3996] tmp___2 = IS_ERR((void const *)req) [L3997] COND FALSE !(tmp___2 != 0L) [L4004] req->cmd_type = 7 [L4005] EXPR vblk->disk [L4005] EXPR (vblk->disk)->queue [L4005] EXPR vblk->disk [L4005] tmp___3 = blk_execute_rq((vblk->disk)->queue, vblk->disk, req, 0) [L4006] return (tmp___3); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4027] err = virtblk_get_id(disk, (char *)(& id_str)) [L4028] COND TRUE err == 0 [L3217] unsigned long tmp ; [L3221] tmp = _copy_to_user(dst, src, size) [L3222] return ((int )tmp); [L4029] tmp = copy_to_user(usr_data, (void const *)(& id_str), 20U) [L4030] COND TRUE tmp != 0 [L4031] err = -14 [L4038] return (err); [L4038] return (err); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND FALSE !(tmp___1 != 0) [L4542] COND FALSE !(ldv_blk_rq == 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4545] CALL ldv_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4433] __VERIFIER_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] ----- [2018-11-23 13:22:53,264 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck CFG 23.11 01:22:53 ImpRootNode [2018-11-23 13:22:53,264 INFO L132 PluginConnector]: ------------------------ END CodeCheck---------------------------- [2018-11-23 13:22:53,265 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 13:22:53,265 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 13:22:53,265 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 13:22:53,265 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:22:51" (3/4) ... [2018-11-23 13:22:53,269 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 13:22:53,269 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 13:22:53,269 INFO L168 Benchmark]: Toolchain (without parser) took 3926.22 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 238.0 MB). Free memory was 949.5 MB in the beginning and 1.1 GB in the end (delta: -179.5 MB). Peak memory consumption was 58.5 MB. Max. memory is 11.5 GB. [2018-11-23 13:22:53,275 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 13:22:53,276 INFO L168 Benchmark]: CACSL2BoogieTranslator took 971.11 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.8 MB). Free memory was 949.5 MB in the beginning and 1.0 GB in the end (delta: -95.4 MB). Peak memory consumption was 70.5 MB. Max. memory is 11.5 GB. [2018-11-23 13:22:53,276 INFO L168 Benchmark]: Boogie Procedure Inliner took 57.84 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 3.5 MB). Peak memory consumption was 3.5 MB. Max. memory is 11.5 GB. [2018-11-23 13:22:53,277 INFO L168 Benchmark]: Boogie Preprocessor took 36.16 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 3.5 MB). Peak memory consumption was 3.5 MB. Max. memory is 11.5 GB. [2018-11-23 13:22:53,277 INFO L168 Benchmark]: RCFGBuilder took 1039.85 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 924.5 MB in the end (delta: 113.3 MB). Peak memory consumption was 113.3 MB. Max. memory is 11.5 GB. [2018-11-23 13:22:53,278 INFO L168 Benchmark]: CodeCheck took 1813.68 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 90.2 MB). Free memory was 924.5 MB in the beginning and 1.1 GB in the end (delta: -204.4 MB). Peak memory consumption was 147.7 MB. Max. memory is 11.5 GB. [2018-11-23 13:22:53,278 INFO L168 Benchmark]: Witness Printer took 4.30 ms. Allocated memory is still 1.3 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 13:22:53,281 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - StatisticsResult: Ultimate CodeCheck benchmark data CFG has 9 procedures, 92 locations, 1 error locations. UNSAFE Result, 0.8s OverallTime, 8 OverallIterations, 0 TraceHistogramMax, 0.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 1370 SDtfs, 908 SDslu, 1460 SDs, 0 SdLazy, 268 SolverSat, 208 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 825 GetRequests, 823 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=-1occurred in iteration=-1, traceCheckStatistics: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.2s InterpolantComputationTime, 138 NumberOfCodeBlocks, 138 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 97 ConstructedInterpolants, 0 QuantifiedInterpolants, 3701 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 7 InterpolantComputations, 7 PerfectInterpolantSequences, 8/8 InterpolantCoveringCapability, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: No data available, ReuseStatistics: No data available - UnprovableResult [Line: 4433]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 4303. Possible FailurePath: [L3726] static int major ; [L3727] static int index ; [L4299-L4302] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4335] int LDV_IN_INTERRUPT ; [L4496] int ldv_blk_rq = 0; [L4080-L4081] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4297-L4298] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4303-L4304] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4330] struct virtio_device_id const __mod_virtio_device_table ; [L4338] struct block_device *var_group1 ; [L4339] fmode_t var_virtblk_ioctl_5_p1 ; [L4340] unsigned int var_virtblk_ioctl_5_p2 ; [L4341] unsigned long var_virtblk_ioctl_5_p3 ; [L4342] struct hd_geometry *var_group2 ; [L4343] int tmp ; [L4344] int tmp___0 ; [L4345] int tmp___1 ; [L4348] LDV_IN_INTERRUPT = 1 [L4307] int tmp ; [L4310] major = register_blkdev(0U, "virtblk") [L4311] COND FALSE !(major < 0) [L4316] tmp = register_virtio_driver(& virtio_blk) [L4317] return (tmp); [L4351] tmp = init() [L4352] COND FALSE !(tmp != 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND TRUE tmp___1 != 0 [L4359] tmp___0 = __VERIFIER_nondet_int() [L4361] case 0: [L4012] struct gendisk *disk ; [L4013] struct virtio_blk *vblk ; [L4014] void *usr_data ; [L4015] char id_str[20U] ; [L4016] int err ; [L4017] int tmp ; [L4018] bool tmp___0 ; [L4019] int tmp___1 ; [L4020] int tmp___2 ; [L4023] EXPR bdev->bd_disk [L4023] disk = bdev->bd_disk [L4024] EXPR disk->private_data [L4024] vblk = (struct virtio_blk *)disk->private_data [L4025] COND TRUE cmd == 1447184708U [L4026] usr_data = (void *)data [L3976] struct virtio_blk *vblk ; [L3977] struct request *req ; [L3978] struct bio *bio ; [L3979] long tmp ; [L3980] long tmp___0 ; [L3981] long tmp___1 ; [L3982] long tmp___2 ; [L3983] int tmp___3 ; [L3986] EXPR disk->private_data [L3986] vblk = (struct virtio_blk *)disk->private_data [L3987] EXPR vblk->disk [L3987] EXPR (vblk->disk)->queue [L3987] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L3988] CALL, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, ptr={0:0}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4408] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, ptr={0:0}, ptr={0:0}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, ptr={0:0}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4449] return ((unsigned long )ptr > 2012UL); [L4411] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=1, ptr={0:0}, ptr={0:0}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); [L3988] RET, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L3988] tmp___0 = IS_ERR((void const *)bio) [L3989] COND FALSE !(tmp___0 != 0L) [L3995] EXPR vblk->disk [L3995] EXPR (vblk->disk)->queue [L4418] ldv_func_ret_type___3 ldv_func_res ; [L4419] struct request *tmp ; [L4422] tmp = blk_make_request(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L4423] ldv_func_res = tmp [L4499] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4502] COND TRUE ldv_blk_rq == 0 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4507] COND TRUE (mask == 16U || mask == 208U) || mask == 16U [L4508] ldv_blk_rq = 1 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4425] return (ldv_func_res); [L3995] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L3996] CALL, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, ptr={18446744073709551616:1}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4408] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, ptr={18446744073709551616:1}, ptr={18446744073709551616:1}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4411] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, ptr={18446744073709551616:1}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4449] return ((unsigned long )ptr > 2012UL); [L4411] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=1, ptr={18446744073709551616:1}, ptr={18446744073709551616:1}, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4411] tmp = ldv_is_err(ptr) [L4412] return (tmp); [L3996] RET, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L3996] tmp___2 = IS_ERR((void const *)req) [L3997] COND FALSE !(tmp___2 != 0L) [L4004] req->cmd_type = 7 [L4005] EXPR vblk->disk [L4005] EXPR (vblk->disk)->queue [L4005] EXPR vblk->disk [L4005] tmp___3 = blk_execute_rq((vblk->disk)->queue, vblk->disk, req, 0) [L4006] return (tmp___3); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4027] err = virtblk_get_id(disk, (char *)(& id_str)) [L4028] COND TRUE err == 0 [L3217] unsigned long tmp ; [L3221] tmp = _copy_to_user(dst, src, size) [L3222] return ((int )tmp); [L4029] tmp = copy_to_user(usr_data, (void const *)(& id_str), 20U) [L4030] COND TRUE tmp != 0 [L4031] err = -14 [L4038] return (err); [L4038] return (err); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4374] tmp___1 = __VERIFIER_nondet_int() [L4375] COND FALSE !(tmp___1 != 0) [L4542] COND FALSE !(ldv_blk_rq == 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4545] CALL ldv_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] [L4433] __VERIFIER_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={17:14}, features={31:0}, id_table={38:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=1, virtblk_fops={27:0}, virtio_blk={18446744073709551616:0}] * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 971.11 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.8 MB). Free memory was 949.5 MB in the beginning and 1.0 GB in the end (delta: -95.4 MB). Peak memory consumption was 70.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 57.84 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 3.5 MB). Peak memory consumption was 3.5 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 36.16 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 3.5 MB). Peak memory consumption was 3.5 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1039.85 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 924.5 MB in the end (delta: 113.3 MB). Peak memory consumption was 113.3 MB. Max. memory is 11.5 GB. * CodeCheck took 1813.68 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 90.2 MB). Free memory was 924.5 MB in the beginning and 1.1 GB in the end (delta: -204.4 MB). Peak memory consumption was 147.7 MB. Max. memory is 11.5 GB. * Witness Printer took 4.30 ms. Allocated memory is still 1.3 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 13:22:54,840 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 13:22:54,842 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 13:22:54,849 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 13:22:54,849 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 13:22:54,850 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 13:22:54,851 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 13:22:54,852 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 13:22:54,853 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 13:22:54,853 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 13:22:54,854 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 13:22:54,854 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 13:22:54,855 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 13:22:54,855 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 13:22:54,856 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 13:22:54,857 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 13:22:54,857 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 13:22:54,859 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 13:22:54,860 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 13:22:54,861 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 13:22:54,862 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 13:22:54,863 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 13:22:54,864 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 13:22:54,865 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 13:22:54,865 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 13:22:54,865 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 13:22:54,866 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 13:22:54,867 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 13:22:54,867 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 13:22:54,868 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 13:22:54,868 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 13:22:54,869 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 13:22:54,869 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 13:22:54,869 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 13:22:54,870 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 13:22:54,870 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 13:22:54,870 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf [2018-11-23 13:22:54,881 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 13:22:54,881 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 13:22:54,882 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 13:22:54,882 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 13:22:54,882 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 13:22:54,882 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 13:22:54,882 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 13:22:54,883 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 13:22:54,883 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 13:22:54,883 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 13:22:54,883 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 13:22:54,883 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 13:22:54,883 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 13:22:54,883 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 13:22:54,884 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 13:22:54,884 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 13:22:54,884 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 13:22:54,884 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 13:22:54,884 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 13:22:54,884 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 13:22:54,884 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 13:22:54,885 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 13:22:54,885 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 13:22:54,885 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 13:22:54,885 INFO L133 SettingsManager]: * Use separate solver for trace checks=false [2018-11-23 13:22:54,885 INFO L133 SettingsManager]: * Trace refinement strategy=WALRUS [2018-11-23 13:22:54,885 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 13:22:54,885 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 13:22:54,886 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 13:22:54,886 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 13:22:54,886 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f9b269fee929c2a3187ed7c2821bda9ec7cbeaea [2018-11-23 13:22:54,917 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 13:22:54,925 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 13:22:54,927 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 13:22:54,928 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 13:22:54,929 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 13:22:54,929 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 13:22:54,965 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data/27d1f01b3/408f731f71c44e3880d71747a4cb7d0a/FLAGd6cc8fc3b [2018-11-23 13:22:55,426 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 13:22:55,426 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13-1.c [2018-11-23 13:22:55,443 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data/27d1f01b3/408f731f71c44e3880d71747a4cb7d0a/FLAGd6cc8fc3b [2018-11-23 13:22:55,732 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/data/27d1f01b3/408f731f71c44e3880d71747a4cb7d0a [2018-11-23 13:22:55,734 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 13:22:55,735 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 13:22:55,736 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 13:22:55,736 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 13:22:55,739 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 13:22:55,740 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:22:55" (1/1) ... [2018-11-23 13:22:55,742 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1ccf1531 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:55, skipping insertion in model container [2018-11-23 13:22:55,742 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:22:55" (1/1) ... [2018-11-23 13:22:55,750 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 13:22:55,808 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 13:22:56,489 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:22:56,592 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 13:22:56,751 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:22:56,811 INFO L195 MainTranslator]: Completed translation [2018-11-23 13:22:56,812 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56 WrapperNode [2018-11-23 13:22:56,812 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 13:22:56,813 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 13:22:56,813 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 13:22:56,813 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 13:22:56,819 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... [2018-11-23 13:22:56,844 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... [2018-11-23 13:22:56,870 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 13:22:56,870 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 13:22:56,870 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 13:22:56,870 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 13:22:56,878 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... [2018-11-23 13:22:56,878 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... [2018-11-23 13:22:56,882 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... [2018-11-23 13:22:56,882 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... [2018-11-23 13:22:56,896 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... [2018-11-23 13:22:56,898 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... [2018-11-23 13:22:56,901 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... [2018-11-23 13:22:56,906 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 13:22:56,906 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 13:22:56,906 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 13:22:56,906 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 13:22:56,907 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:22:56" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2bac8ea6-3954-41fe-8ac5-56270551b15c/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 13:22:56,957 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2018-11-23 13:22:56,957 INFO L130 BoogieDeclarations]: Found specification of procedure scsi_cmd_ioctl [2018-11-23 13:22:56,957 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2018-11-23 13:22:56,957 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 13:22:56,957 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_config_buf [2018-11-23 13:22:56,958 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_config_buf [2018-11-23 13:22:56,958 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2018-11-23 13:22:56,958 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 13:22:56,958 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_UINT~X~$Pointer$~X~C_UINT~TO~VOID [2018-11-23 13:22:56,958 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_UINT~X~$Pointer$~X~C_UINT~TO~VOID [2018-11-23 13:22:56,958 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_blkdev [2018-11-23 13:22:56,958 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 13:22:56,958 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 13:22:56,958 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 13:22:56,958 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 13:22:56,959 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_check_driver_offered_feature [2018-11-23 13:22:56,959 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_has_feature [2018-11-23 13:22:56,959 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_has_feature [2018-11-23 13:22:56,959 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_virtio_driver [2018-11-23 13:22:56,959 INFO L130 BoogieDeclarations]: Found specification of procedure blk_execute_rq [2018-11-23 13:22:56,959 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2018-11-23 13:22:56,959 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 13:22:56,959 INFO L130 BoogieDeclarations]: Found specification of procedure register_virtio_driver [2018-11-23 13:22:56,959 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 13:22:56,960 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 13:22:56,960 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 13:22:56,960 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 13:22:56,960 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2018-11-23 13:22:56,960 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-23 13:22:56,960 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 13:22:56,960 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 13:22:56,960 INFO L130 BoogieDeclarations]: Found specification of procedure bio_put [2018-11-23 13:22:56,960 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 13:22:56,960 INFO L130 BoogieDeclarations]: Found specification of procedure bio_map_kern [2018-11-23 13:22:56,961 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2018-11-23 13:22:56,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2018-11-23 13:22:56,961 INFO L130 BoogieDeclarations]: Found specification of procedure blk_make_request [2018-11-23 13:22:56,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 13:22:56,961 INFO L130 BoogieDeclarations]: Found specification of procedure register_blkdev [2018-11-23 13:22:56,961 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2018-11-23 13:22:56,961 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 13:22:56,961 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 13:22:56,961 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 13:22:56,961 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 13:23:12,325 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 13:23:12,325 INFO L280 CfgBuilder]: Removed 30 assue(true) statements. [2018-11-23 13:23:12,326 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:23:12 BoogieIcfgContainer [2018-11-23 13:23:12,326 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 13:23:12,326 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-23 13:23:12,326 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-23 13:23:12,333 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-23 13:23:12,333 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:23:12" (1/1) ... [2018-11-23 13:23:12,340 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:23:12,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 13:23:12,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 59 states and 74 transitions. [2018-11-23 13:23:12,365 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 74 transitions. [2018-11-23 13:23:12,368 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2018-11-23 13:23:12,368 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 13:23:12,398 FATAL L292 ToolchainWalker]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck has thrown an exception: java.lang.IllegalArgumentException: Indexed Sort BitVec undefined at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.getSort(SortSymbol.java:177) at de.uni_freiburg.informatik.ultimate.logic.Theory.getSort(Theory.java:1243) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.sort(NoopScript.java:287) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.transferSort(TermTransferrer.java:128) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.convertApplicationTerm(TermTransferrer.java:162) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer$BuildApplicationTerm.walk(TermTransformer.java:320) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:122) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:113) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer.transform(TermTransformer.java:253) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.cfg.SmtSymbols.transferSymbols(SmtSymbols.java:129) at de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck.CodeCheckObserver.process(CodeCheckObserver.java:449) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.CFGWalker.runObserver(CFGWalker.java:57) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.runObserver(BaseWalker.java:93) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.run(BaseWalker.java:86) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:167) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:316) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2018-11-23 13:23:12,400 INFO L168 Benchmark]: Toolchain (without parser) took 16665.29 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 168.8 MB). Free memory was 942.5 MB in the beginning and 931.0 MB in the end (delta: 11.5 MB). Peak memory consumption was 180.3 MB. Max. memory is 11.5 GB. [2018-11-23 13:23:12,401 INFO L168 Benchmark]: CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 13:23:12,402 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1075.98 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 168.8 MB). Free memory was 942.5 MB in the beginning and 1.1 GB in the end (delta: -126.7 MB). Peak memory consumption was 91.3 MB. Max. memory is 11.5 GB. [2018-11-23 13:23:12,403 INFO L168 Benchmark]: Boogie Procedure Inliner took 57.31 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 13:23:12,403 INFO L168 Benchmark]: Boogie Preprocessor took 35.73 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2018-11-23 13:23:12,404 INFO L168 Benchmark]: RCFGBuilder took 15420.11 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 937.6 MB in the end (delta: 125.0 MB). Peak memory consumption was 125.0 MB. Max. memory is 11.5 GB. [2018-11-23 13:23:12,404 INFO L168 Benchmark]: CodeCheck took 73.08 ms. Allocated memory is still 1.2 GB. Free memory was 937.6 MB in the beginning and 931.0 MB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2018-11-23 13:23:12,407 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: IllegalArgumentException: Indexed Sort BitVec undefined: de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1075.98 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 168.8 MB). Free memory was 942.5 MB in the beginning and 1.1 GB in the end (delta: -126.7 MB). Peak memory consumption was 91.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 57.31 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 35.73 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 15420.11 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 937.6 MB in the end (delta: 125.0 MB). Peak memory consumption was 125.0 MB. Max. memory is 11.5 GB. * CodeCheck took 73.08 ms. Allocated memory is still 1.2 GB. Free memory was 937.6 MB in the beginning and 931.0 MB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...