./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13.c --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13.c -s /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 7a007860a1f255f5d7c2c804e87b980a4128db63 ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13.c -s /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 7a007860a1f255f5d7c2c804e87b980a4128db63 ..................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 06:30:39,996 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 06:30:39,997 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 06:30:40,004 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 06:30:40,004 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 06:30:40,005 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 06:30:40,005 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 06:30:40,006 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 06:30:40,007 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 06:30:40,007 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 06:30:40,008 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 06:30:40,008 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 06:30:40,009 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 06:30:40,009 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 06:30:40,010 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 06:30:40,011 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 06:30:40,011 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 06:30:40,012 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 06:30:40,014 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 06:30:40,014 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 06:30:40,015 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 06:30:40,016 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 06:30:40,017 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 06:30:40,018 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 06:30:40,018 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 06:30:40,018 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 06:30:40,019 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 06:30:40,019 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 06:30:40,020 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 06:30:40,020 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 06:30:40,020 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 06:30:40,021 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 06:30:40,021 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 06:30:40,021 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 06:30:40,022 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 06:30:40,022 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 06:30:40,023 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf [2018-11-23 06:30:40,029 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 06:30:40,030 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 06:30:40,030 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 06:30:40,030 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 06:30:40,030 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 06:30:40,031 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 06:30:40,031 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 06:30:40,031 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 06:30:40,031 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 06:30:40,031 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 06:30:40,031 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 06:30:40,031 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 06:30:40,031 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 06:30:40,032 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 06:30:40,032 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 06:30:40,032 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 06:30:40,032 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 06:30:40,032 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 06:30:40,032 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 06:30:40,032 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 06:30:40,032 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 06:30:40,033 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 06:30:40,033 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 06:30:40,033 INFO L133 SettingsManager]: * Trace refinement strategy=PENGUIN [2018-11-23 06:30:40,033 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 06:30:40,033 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 06:30:40,033 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 06:30:40,033 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7a007860a1f255f5d7c2c804e87b980a4128db63 [2018-11-23 06:30:40,054 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 06:30:40,062 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 06:30:40,064 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 06:30:40,065 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 06:30:40,065 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 06:30:40,065 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13.c [2018-11-23 06:30:40,100 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data/113e0252d/4df6f546822a4b36b6b8897aba12df87/FLAG9160e9cb8 [2018-11-23 06:30:40,630 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 06:30:40,630 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13.c [2018-11-23 06:30:40,646 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data/113e0252d/4df6f546822a4b36b6b8897aba12df87/FLAG9160e9cb8 [2018-11-23 06:30:41,081 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data/113e0252d/4df6f546822a4b36b6b8897aba12df87 [2018-11-23 06:30:41,083 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 06:30:41,083 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 06:30:41,084 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 06:30:41,084 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 06:30:41,087 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 06:30:41,088 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:41,090 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@500b5587 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41, skipping insertion in model container [2018-11-23 06:30:41,090 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:41,095 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 06:30:41,145 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 06:30:41,805 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 06:30:41,813 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 06:30:41,946 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 06:30:41,984 INFO L195 MainTranslator]: Completed translation [2018-11-23 06:30:41,984 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41 WrapperNode [2018-11-23 06:30:41,984 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 06:30:41,985 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 06:30:41,985 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 06:30:41,985 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 06:30:41,990 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:42,013 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:42,039 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 06:30:42,040 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 06:30:42,040 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 06:30:42,040 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 06:30:42,045 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:42,046 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:42,050 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:42,050 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:42,063 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:42,066 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:42,069 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... [2018-11-23 06:30:42,073 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 06:30:42,073 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 06:30:42,073 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 06:30:42,073 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 06:30:42,074 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:41" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 06:30:42,120 INFO L130 BoogieDeclarations]: Found specification of procedure scsi_cmd_ioctl [2018-11-23 06:30:42,121 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 06:30:42,121 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_config_buf [2018-11-23 06:30:42,121 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_config_buf [2018-11-23 06:30:42,121 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 06:30:42,121 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 06:30:42,121 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-23 06:30:42,121 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-23 06:30:42,121 INFO L130 BoogieDeclarations]: Found specification of procedure blk_put_request [2018-11-23 06:30:42,122 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_blkdev [2018-11-23 06:30:42,122 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 06:30:42,122 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 06:30:42,122 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 06:30:42,122 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 06:30:42,122 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 06:30:42,122 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_check_driver_offered_feature [2018-11-23 06:30:42,123 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_has_feature [2018-11-23 06:30:42,123 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_has_feature [2018-11-23 06:30:42,123 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_virtio_driver [2018-11-23 06:30:42,123 INFO L130 BoogieDeclarations]: Found specification of procedure blk_execute_rq [2018-11-23 06:30:42,123 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2018-11-23 06:30:42,123 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 06:30:42,124 INFO L130 BoogieDeclarations]: Found specification of procedure register_virtio_driver [2018-11-23 06:30:42,124 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 06:30:42,124 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 06:30:42,124 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 06:30:42,124 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 06:30:42,124 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 06:30:42,124 INFO L130 BoogieDeclarations]: Found specification of procedure bio_put [2018-11-23 06:30:42,124 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 06:30:42,124 INFO L130 BoogieDeclarations]: Found specification of procedure bio_map_kern [2018-11-23 06:30:42,124 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2018-11-23 06:30:42,125 INFO L130 BoogieDeclarations]: Found specification of procedure blk_make_request [2018-11-23 06:30:42,125 INFO L130 BoogieDeclarations]: Found specification of procedure register_blkdev [2018-11-23 06:30:42,125 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 06:30:42,125 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2018-11-23 06:30:42,125 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 06:30:42,125 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 06:30:42,125 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 06:30:42,125 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 06:30:43,025 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 06:30:43,025 INFO L280 CfgBuilder]: Removed 34 assue(true) statements. [2018-11-23 06:30:43,026 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 06:30:43 BoogieIcfgContainer [2018-11-23 06:30:43,026 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 06:30:43,026 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-23 06:30:43,026 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-23 06:30:43,036 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-23 06:30:43,036 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 06:30:43" (1/1) ... [2018-11-23 06:30:43,047 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 06:30:43,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 62 states and 79 transitions. [2018-11-23 06:30:43,082 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 79 transitions. [2018-11-23 06:30:43,087 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2018-11-23 06:30:43,087 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:43,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 06:30:43,277 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 06:30:43,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 62 states and 76 transitions. [2018-11-23 06:30:43,334 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 76 transitions. [2018-11-23 06:30:43,334 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2018-11-23 06:30:43,334 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:43,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 06:30:43,383 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 06:30:43,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 64 states and 81 transitions. [2018-11-23 06:30:43,389 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 81 transitions. [2018-11-23 06:30:43,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2018-11-23 06:30:43,390 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:43,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 06:30:43,430 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 06:30:43,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 66 states and 84 transitions. [2018-11-23 06:30:43,435 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 84 transitions. [2018-11-23 06:30:43,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2018-11-23 06:30:43,436 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:43,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 06:30:43,485 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 06:30:43,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,495 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 70 states and 90 transitions. [2018-11-23 06:30:43,495 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2018-11-23 06:30:43,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2018-11-23 06:30:43,498 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:43,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 06:30:43,540 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 06:30:43,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 74 states and 95 transitions. [2018-11-23 06:30:43,557 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 95 transitions. [2018-11-23 06:30:43,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2018-11-23 06:30:43,558 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:43,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 06:30:43,630 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 06:30:43,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 76 states and 97 transitions. [2018-11-23 06:30:43,639 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2018-11-23 06:30:43,640 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2018-11-23 06:30:43,640 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:43,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 06:30:43,690 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 06:30:43,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 79 states and 101 transitions. [2018-11-23 06:30:43,708 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 101 transitions. [2018-11-23 06:30:43,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2018-11-23 06:30:43,709 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:43,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 06:30:43,756 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 06:30:43,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 84 states and 109 transitions. [2018-11-23 06:30:43,795 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2018-11-23 06:30:43,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2018-11-23 06:30:43,796 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:43,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 06:30:43,865 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 06:30:43,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:30:43,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 73 states and 92 transitions. [2018-11-23 06:30:43,954 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 92 transitions. [2018-11-23 06:30:43,955 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 06:30:43,955 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:30:44,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 06:30:44,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 06:30:44,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 06:30:45,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 06:30:45,103 WARN L493 CodeCheckObserver]: This program is UNSAFE, Check terminated with 10 iterations. ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string109.base, #t~string109.offset := #Ultimate.alloc(28);call #t~string290.base, #t~string290.offset := #Ultimate.alloc(22);call #t~string293.base, #t~string293.offset := #Ultimate.alloc(9);call #t~string307.base, #t~string307.offset := #Ultimate.alloc(5);call write~init~int(118, #t~string307.base, #t~string307.offset, 1);call write~init~int(100, #t~string307.base, 1 + #t~string307.offset, 1);call write~init~int(37, #t~string307.base, 2 + #t~string307.offset, 1);call write~init~int(99, #t~string307.base, 3 + #t~string307.offset, 1);call write~init~int(0, #t~string307.base, 4 + #t~string307.offset, 1);call #t~string310.base, #t~string310.offset := #Ultimate.alloc(7);call write~init~int(118, #t~string310.base, #t~string310.offset, 1);call write~init~int(100, #t~string310.base, 1 + #t~string310.offset, 1);call write~init~int(37, #t~string310.base, 2 + #t~string310.offset, 1);call write~init~int(99, #t~string310.base, 3 + #t~string310.offset, 1);call write~init~int(37, #t~string310.base, 4 + #t~string310.offset, 1);call write~init~int(99, #t~string310.base, 5 + #t~string310.offset, 1);call write~init~int(0, #t~string310.base, 6 + #t~string310.offset, 1);call #t~string313.base, #t~string313.offset := #Ultimate.alloc(9);call #t~string388.base, #t~string388.offset := #Ultimate.alloc(11);call #t~string389.base, #t~string389.offset := #Ultimate.alloc(8);call #t~string392.base, #t~string392.offset := #Ultimate.alloc(8);~major~0 := 0;~index~0 := 0;call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36);call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4);call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4);call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4);call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4);call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4);call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4);call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4);call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4);call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4);~LDV_IN_INTERRUPT~0 := 0;~ldv_blk_rq~0 := 0;call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8);call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16);call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4);call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4);call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4);call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4);call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141);call write~init~$Pointer$(#t~string388.base, #t~string388.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8);call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8);call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4);call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8);call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8);~__mod_virtio_device_table~0.device := 0;~__mod_virtio_device_table~0.vendor := 0;havoc main_#res;havoc main_#t~ret393, main_#t~nondet394, main_#t~switch395, main_#t~ret396, main_#t~ret397, main_#t~nondet398, main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0.base, main_~var_group2~0.offset, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8;havoc main_~var_group1~0.base, main_~var_group1~0.offset;havoc main_~var_virtblk_ioctl_5_p1~0;havoc main_~var_virtblk_ioctl_5_p2~0;havoc main_~var_virtblk_ioctl_5_p3~0;havoc main_~var_group2~0.base, main_~var_group2~0.offset;havoc main_~tmp~21;havoc main_~tmp___0~13;havoc main_~tmp___1~8;~LDV_IN_INTERRUPT~0 := 1;call ldv_initialize();call ldv_handler_precall();havoc init_#res;havoc init_#t~ret390, init_#t~ret391, init_~tmp~20;havoc init_~tmp~20;call init_#t~ret390 := register_blkdev(0, #t~string389.base, #t~string389.offset);assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647;~major~0 := init_#t~ret390;havoc init_#t~ret390;BeginParallelComposition{ParallelCodeBlock0: assume ~major~0 < 0;init_#res := ~major~0;ParallelCodeBlock1: assume !(~major~0 < 0);call init_#t~ret391 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset);assume -2147483648 <= init_#t~ret391 && init_#t~ret391 <= 2147483647;init_~tmp~20 := init_#t~ret391;havoc init_#t~ret391;init_#res := init_~tmp~20;}EndParallelCompositionmain_#t~ret393 := init_#res;assume -2147483648 <= main_#t~ret393 && main_#t~ret393 <= 2147483647;main_~tmp~21 := main_#t~ret393;havoc main_#t~ret393; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 != main_~tmp~21); VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647;main_~tmp___1~8 := main_#t~nondet398;havoc main_#t~nondet398; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume 0 != main_~tmp___1~8;assume -2147483648 <= main_#t~nondet394 && main_#t~nondet394 <= 2147483647;main_~tmp___0~13 := main_#t~nondet394;havoc main_#t~nondet394;main_#t~switch395 := 0 == main_~tmp___0~13; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_main_#t~switch395|=true, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume main_#t~switch395;call ldv_handler_precall();virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0;havoc virtblk_ioctl_#res;havoc virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset, virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~ret268, virtblk_ioctl_#t~mem269.base, virtblk_ioctl_#t~mem269.offset, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271.base, virtblk_ioctl_#t~mem271.offset, virtblk_ioctl_#t~ret272, virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset, virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, virtblk_ioctl_~err~2, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2;virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset := virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset;virtblk_ioctl_~mode := virtblk_ioctl_#in~mode;virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd;virtblk_ioctl_~data := virtblk_ioctl_#in~data;havoc virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset;havoc virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset;havoc virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset;call virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset := #Ultimate.alloc(20);havoc virtblk_ioctl_~err~2;havoc virtblk_ioctl_~tmp~16;havoc virtblk_ioctl_~tmp___0~10;havoc virtblk_ioctl_~tmp___1~6;havoc virtblk_ioctl_~tmp___2~2;call virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset := read~$Pointer$(virtblk_ioctl_~bdev.base, 240 + virtblk_ioctl_~bdev.offset, 8);virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset := virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset;havoc virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset;call virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset := read~$Pointer$(virtblk_ioctl_~disk~0.base, 1075 + virtblk_ioctl_~disk~0.offset, 8);virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset := virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset;havoc virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume 1447184708 == virtblk_ioctl_~cmd % 4294967296;virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset := 0, (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset, virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset := virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset;havoc virtblk_get_id_#res;havoc virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset, virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset, virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset, virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset, virtblk_get_id_#t~ret254, virtblk_get_id_#t~ret255, virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset, virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset, virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset, virtblk_get_id_#t~ret259, virtblk_get_id_#t~ret260, virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset, virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset, virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset, virtblk_get_id_#t~ret264, virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, virtblk_get_id_~err~1, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1;virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset := virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset;virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset := virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset;havoc virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset;havoc virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset;havoc virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset;havoc virtblk_get_id_~err~1;havoc virtblk_get_id_~tmp~15;havoc virtblk_get_id_~tmp___0~9;havoc virtblk_get_id_~tmp___1~5;havoc virtblk_get_id_~tmp___2~1;call virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset := read~$Pointer$(virtblk_get_id_~disk.base, 1075 + virtblk_get_id_~disk.offset, 8);virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset := virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset;havoc virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset;call virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset := read~$Pointer$(virtblk_get_id_#t~mem251.base, 1067 + virtblk_get_id_#t~mem251.offset, 8);call virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset := bio_map_kern(virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, 20, 208);virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset := virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset;havoc virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset;havoc virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset;havoc virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call virtblk_get_id_#t~ret254 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~24; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0);assume true; VAL [ldv_is_err_~ptr.base=0, ldv_is_err_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=0, |ldv_is_err_#res|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #236#return; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#t~ret401|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807;~tmp~24 := #t~ret401;havoc #t~ret401;#res := ~tmp~24;assume true; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=0, IS_ERR_~tmp~24=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=0, |IS_ERR_#res|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #216#return; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~ret254|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -9223372036854775808 <= virtblk_get_id_#t~ret254 && virtblk_get_id_#t~ret254 <= 9223372036854775807;virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret254;havoc virtblk_get_id_#t~ret254; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 != virtblk_get_id_~tmp___0~9);call virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8);call virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset := read~$Pointer$(virtblk_get_id_#t~mem256.base, 1067 + virtblk_get_id_#t~mem256.offset, 8);ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset, ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, 208;havoc ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset;havoc ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset, ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset;ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset := ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset;ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset := ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset;ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3;havoc ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset;havoc ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset;call ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3);ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset := ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset;havoc ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset;ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset := ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset;ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~ldv_func_arg3;havoc ldv_get_blk_rq_#t~ret405, ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28;ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset := ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset;ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask;havoc ldv_get_blk_rq_~tmp~28; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem256.base|=43, |ULTIMATE.start_virtblk_get_id_#t~mem256.offset|=3986, |ULTIMATE.start_virtblk_get_id_#t~mem257.base|=35, |ULTIMATE.start_virtblk_get_id_#t~mem257.offset|=39, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume 0 == ~ldv_blk_rq~0; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem256.base|=43, |ULTIMATE.start_virtblk_get_id_#t~mem256.offset|=3986, |ULTIMATE.start_virtblk_get_id_#t~mem257.base|=35, |ULTIMATE.start_virtblk_get_id_#t~mem257.offset|=39, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296;~ldv_blk_rq~0 := 1; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~mem256.base|=43, |ULTIMATE.start_virtblk_get_id_#t~mem256.offset|=3986, |ULTIMATE.start_virtblk_get_id_#t~mem257.base|=35, |ULTIMATE.start_virtblk_get_id_#t~mem257.offset|=39, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset;virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset := ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset;virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset := virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset;havoc virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset;havoc virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset;havoc virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call virtblk_get_id_#t~ret259 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |IS_ERR_#in~ptr.base|=(- 1), |IS_ERR_#in~ptr.offset|=(- 27670116106269358115), |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~24; VAL [IS_ERR_~ptr.base=(- 1), IS_ERR_~ptr.offset=(- 27670116106269358115), |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |IS_ERR_#in~ptr.base|=(- 1), |IS_ERR_#in~ptr.offset|=(- 27670116106269358115), |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ldv_is_err_#in~ptr.base|=(- 1), |ldv_is_err_#in~ptr.offset|=(- 27670116106269358115), |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0);assume true; VAL [ldv_is_err_~ptr.base=(- 1), ldv_is_err_~ptr.offset=(- 27670116106269358115), |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ldv_is_err_#in~ptr.base|=(- 1), |ldv_is_err_#in~ptr.offset|=(- 27670116106269358115), |ldv_is_err_#res|=1, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #236#return; VAL [IS_ERR_~ptr.base=(- 1), IS_ERR_~ptr.offset=(- 27670116106269358115), |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |IS_ERR_#in~ptr.base|=(- 1), |IS_ERR_#in~ptr.offset|=(- 27670116106269358115), |IS_ERR_#t~ret401|=1, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807;~tmp~24 := #t~ret401;havoc #t~ret401;#res := ~tmp~24;assume true; VAL [IS_ERR_~ptr.base=(- 1), IS_ERR_~ptr.offset=(- 27670116106269358115), IS_ERR_~tmp~24=1, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |IS_ERR_#in~ptr.base|=(- 1), |IS_ERR_#in~ptr.offset|=(- 27670116106269358115), |IS_ERR_#res|=1, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #224#return; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~ret259|=1, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -9223372036854775808 <= virtblk_get_id_#t~ret259 && virtblk_get_id_#t~ret259 <= 9223372036854775807;virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret259;havoc virtblk_get_id_#t~ret259; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=1, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume 0 != virtblk_get_id_~tmp___2~1;call bio_put(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=1, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call virtblk_get_id_#t~ret260 := PTR_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |PTR_ERR_#in~ptr.base|=(- 1), |PTR_ERR_#in~ptr.offset|=(- 27670116106269358115), |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~23;ldv_ptr_err_#in~ptr.base, ldv_ptr_err_#in~ptr.offset := ~ptr.base, ~ptr.offset;havoc ldv_ptr_err_#res;havoc ldv_ptr_err_~ptr.base, ldv_ptr_err_~ptr.offset;ldv_ptr_err_~ptr.base, ldv_ptr_err_~ptr.offset := ldv_ptr_err_#in~ptr.base, ldv_ptr_err_#in~ptr.offset;ldv_ptr_err_#res := (if (2012 - (ldv_ptr_err_~ptr.base + ldv_ptr_err_~ptr.offset)) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (2012 - (ldv_ptr_err_~ptr.base + ldv_ptr_err_~ptr.offset)) % 18446744073709551616 % 18446744073709551616 else (2012 - (ldv_ptr_err_~ptr.base + ldv_ptr_err_~ptr.offset)) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);#t~ret400 := ldv_ptr_err_#res;assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807;~tmp~23 := #t~ret400;havoc #t~ret400;#res := ~tmp~23;assume true; VAL [PTR_ERR_ldv_ptr_err_~ptr.base=(- 1), PTR_ERR_ldv_ptr_err_~ptr.offset=(- 27670116106269358115), PTR_ERR_~ptr.base=(- 1), PTR_ERR_~ptr.offset=(- 27670116106269358115), PTR_ERR_~tmp~23=9223372032559808512, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |PTR_ERR_#in~ptr.base|=(- 1), |PTR_ERR_#in~ptr.offset|=(- 27670116106269358115), |PTR_ERR_#res|=9223372032559808512, |PTR_ERR_ldv_ptr_err_#in~ptr.base|=(- 1), |PTR_ERR_ldv_ptr_err_#in~ptr.offset|=(- 27670116106269358115), |PTR_ERR_ldv_ptr_err_#res|=9223372032559808512, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] RET #226#return; VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___2~1=1, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#t~ret260|=9223372032559808512, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -9223372036854775808 <= virtblk_get_id_#t~ret260 && virtblk_get_id_#t~ret260 <= 9223372036854775807;virtblk_get_id_~tmp___1~5 := virtblk_get_id_#t~ret260;havoc virtblk_get_id_#t~ret260;virtblk_get_id_#res := (if virtblk_get_id_~tmp___1~5 % 4294967296 <= 2147483647 then virtblk_get_id_~tmp___1~5 % 4294967296 else virtblk_get_id_~tmp___1~5 % 4294967296 - 4294967296); VAL [ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___1~5=9223372032559808512, ULTIMATE.start_virtblk_get_id_~tmp___2~1=1, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.base|=30, |ULTIMATE.start_virtblk_ioctl_~#id_str~0.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] virtblk_ioctl_#t~ret267 := virtblk_get_id_#res;assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647;virtblk_ioctl_~err~2 := virtblk_ioctl_#t~ret267;havoc virtblk_ioctl_#t~ret267;BeginParallelComposition{ParallelCodeBlock0: assume !(0 == virtblk_ioctl_~err~2);ParallelCodeBlock1: assume 0 == virtblk_ioctl_~err~2;copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset, copy_to_user_#in~src.base, copy_to_user_#in~src.offset, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, 20;havoc copy_to_user_#res;havoc copy_to_user_#t~ret33, copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size, copy_to_user_~tmp~0;copy_to_user_~dst.base, copy_to_user_~dst.offset := copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset;copy_to_user_~src.base, copy_to_user_~src.offset := copy_to_user_#in~src.base, copy_to_user_#in~src.offset;copy_to_user_~size := copy_to_user_#in~size;havoc copy_to_user_~tmp~0;call might_fault();call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size);copy_to_user_~tmp~0 := copy_to_user_#t~ret33;havoc copy_to_user_#t~ret33;copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296);virtblk_ioctl_#t~ret268 := copy_to_user_#res;assume -2147483648 <= virtblk_ioctl_#t~ret268 && virtblk_ioctl_#t~ret268 <= 2147483647;virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret268;havoc virtblk_ioctl_#t~ret268;BeginParallelComposition{ParallelCodeBlock0: assume 0 != virtblk_ioctl_~tmp~16;virtblk_ioctl_~err~2 := -14;ParallelCodeBlock1: assume !(0 != virtblk_ioctl_~tmp~16);}EndParallelComposition}EndParallelCompositionvirtblk_ioctl_#res := virtblk_ioctl_~err~2;call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset);havoc virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=30, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=0, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___1~5=9223372032559808512, ULTIMATE.start_virtblk_get_id_~tmp___2~1=1, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~err~2=0, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~tmp~16=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=30, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=0, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_#res|=0, |ULTIMATE.start_virtblk_ioctl_#t~ret268|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] main_#t~ret396 := virtblk_ioctl_#res;assume -2147483648 <= main_#t~ret396 && main_#t~ret396 <= 2147483647;havoc main_#t~ret396; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=30, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=0, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=(- 1), ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___1~5=9223372032559808512, ULTIMATE.start_virtblk_get_id_~tmp___2~1=1, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~err~2=0, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~tmp~16=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=30, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=0, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_#res|=0, |ULTIMATE.start_virtblk_ioctl_#t~ret268|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647;main_~tmp___1~8 := main_#t~nondet398;havoc main_#t~nondet398; VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=30, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=0, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=0, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___1~5=9223372032559808512, ULTIMATE.start_virtblk_get_id_~tmp___2~1=1, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~err~2=0, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~tmp~16=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=30, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=0, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_#res|=0, |ULTIMATE.start_virtblk_ioctl_#t~ret268|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 != main_~tmp___1~8);call ldv_handler_precall();call unregister_blkdev(~major~0, #t~string392.base, #t~string392.offset);call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=30, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=0, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=0, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___1~5=9223372032559808512, ULTIMATE.start_virtblk_get_id_~tmp___2~1=1, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~err~2=0, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~tmp~16=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=30, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=0, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_#res|=0, |ULTIMATE.start_virtblk_ioctl_#t~ret268|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !(0 == ~ldv_blk_rq~0); VAL [ULTIMATE.start_copy_to_user_~dst.base=0, ULTIMATE.start_copy_to_user_~dst.offset=0, ULTIMATE.start_copy_to_user_~size=20, ULTIMATE.start_copy_to_user_~src.base=30, ULTIMATE.start_copy_to_user_~src.offset=0, ULTIMATE.start_copy_to_user_~tmp~0=0, ULTIMATE.start_init_~tmp~20=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.base=35, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.base=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_arg3=208, ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~ldv_func_res~0.offset=(- 27670116106269358115), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.base=(- 1), ULTIMATE.start_ldv_blk_make_request_5_~tmp~25.offset=(- 27670116106269358115), ULTIMATE.start_ldv_get_blk_rq_~mask=208, ULTIMATE.start_ldv_get_blk_rq_~res.base=(- 1), ULTIMATE.start_ldv_get_blk_rq_~res.offset=(- 27670116106269358115), ULTIMATE.start_main_~tmp___0~13=0, ULTIMATE.start_main_~tmp___1~8=0, ULTIMATE.start_main_~tmp~21=0, ULTIMATE.start_main_~var_group1~0.base=76, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_main_~var_virtblk_ioctl_5_p1~0=77, ULTIMATE.start_main_~var_virtblk_ioctl_5_p2~0=1447184708, ULTIMATE.start_main_~var_virtblk_ioctl_5_p3~0=0, ULTIMATE.start_virtblk_get_id_~bio~0.base=0, ULTIMATE.start_virtblk_get_id_~bio~0.offset=0, ULTIMATE.start_virtblk_get_id_~disk.base=47, ULTIMATE.start_virtblk_get_id_~disk.offset=1872, ULTIMATE.start_virtblk_get_id_~id_str.base=30, ULTIMATE.start_virtblk_get_id_~id_str.offset=0, ULTIMATE.start_virtblk_get_id_~req~1.base=(- 1), ULTIMATE.start_virtblk_get_id_~req~1.offset=(- 27670116106269358115), ULTIMATE.start_virtblk_get_id_~tmp___0~9=0, ULTIMATE.start_virtblk_get_id_~tmp___1~5=9223372032559808512, ULTIMATE.start_virtblk_get_id_~tmp___2~1=1, ULTIMATE.start_virtblk_get_id_~vblk~2.base=51, ULTIMATE.start_virtblk_get_id_~vblk~2.offset=6121, ULTIMATE.start_virtblk_ioctl_~bdev.base=76, ULTIMATE.start_virtblk_ioctl_~bdev.offset=0, ULTIMATE.start_virtblk_ioctl_~cmd=1447184708, ULTIMATE.start_virtblk_ioctl_~data=0, ULTIMATE.start_virtblk_ioctl_~disk~0.base=47, ULTIMATE.start_virtblk_ioctl_~disk~0.offset=1872, ULTIMATE.start_virtblk_ioctl_~err~2=0, ULTIMATE.start_virtblk_ioctl_~mode=77, ULTIMATE.start_virtblk_ioctl_~tmp~16=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.base=0, ULTIMATE.start_virtblk_ioctl_~usr_data~0.offset=0, ULTIMATE.start_virtblk_ioctl_~vblk~3.base=51, ULTIMATE.start_virtblk_ioctl_~vblk~3.offset=6121, |#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |ULTIMATE.start_copy_to_user_#in~dst.base|=0, |ULTIMATE.start_copy_to_user_#in~dst.offset|=0, |ULTIMATE.start_copy_to_user_#in~size|=20, |ULTIMATE.start_copy_to_user_#in~src.base|=30, |ULTIMATE.start_copy_to_user_#in~src.offset|=0, |ULTIMATE.start_copy_to_user_#res|=0, |ULTIMATE.start_copy_to_user_#t~ret33|=0, |ULTIMATE.start_init_#res|=0, |ULTIMATE.start_init_#t~ret391|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.base|=35, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg1.offset|=39, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.base|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg2.offset|=0, |ULTIMATE.start_ldv_blk_make_request_5_#in~ldv_func_arg3|=208, |ULTIMATE.start_ldv_blk_make_request_5_#res.base|=(- 1), |ULTIMATE.start_ldv_blk_make_request_5_#res.offset|=(- 27670116106269358115), |ULTIMATE.start_ldv_get_blk_rq_#in~mask|=208, |ULTIMATE.start_ldv_get_blk_rq_#in~res.base|=(- 1), |ULTIMATE.start_ldv_get_blk_rq_#in~res.offset|=(- 27670116106269358115), |ULTIMATE.start_main_#t~switch395|=true, |ULTIMATE.start_virtblk_get_id_#in~disk.base|=47, |ULTIMATE.start_virtblk_get_id_#in~disk.offset|=1872, |ULTIMATE.start_virtblk_get_id_#in~id_str.base|=30, |ULTIMATE.start_virtblk_get_id_#in~id_str.offset|=0, |ULTIMATE.start_virtblk_get_id_#res|=0, |ULTIMATE.start_virtblk_ioctl_#in~bdev.base|=76, |ULTIMATE.start_virtblk_ioctl_#in~bdev.offset|=0, |ULTIMATE.start_virtblk_ioctl_#in~cmd|=1447184708, |ULTIMATE.start_virtblk_ioctl_#in~data|=0, |ULTIMATE.start_virtblk_ioctl_#in~mode|=77, |ULTIMATE.start_virtblk_ioctl_#res|=0, |ULTIMATE.start_virtblk_ioctl_#t~ret268|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] CALL call ldv_error(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] assume !false; VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string109.base|=29, |#t~string109.offset|=0, |#t~string290.base|=19, |#t~string290.offset|=0, |#t~string293.base|=27, |#t~string293.offset|=0, |#t~string307.base|=13, |#t~string307.offset|=0, |#t~string310.base|=23, |#t~string310.offset|=0, |#t~string313.base|=14, |#t~string313.offset|=0, |#t~string388.base|=26, |#t~string388.offset|=0, |#t~string389.base|=17, |#t~string389.offset|=0, |#t~string392.base|=21, |#t~string392.offset|=0, |~#__this_module~0.base|=62, |~#__this_module~0.offset|=67, |~#features~0.base|=25, |~#features~0.offset|=0, |~#id_table~0.base|=31, |~#id_table~0.offset|=0, |~#virtblk_fops~0.base|=18, |~#virtblk_fops~0.offset|=0, |~#virtio_blk~0.base|=15, |~#virtio_blk~0.offset|=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3328] call #t~string109.base, #t~string109.offset := #Ultimate.alloc(28); [L4146] call #t~string290.base, #t~string290.offset := #Ultimate.alloc(22); [L4150] call #t~string293.base, #t~string293.offset := #Ultimate.alloc(9); [L4184] call #t~string307.base, #t~string307.offset := #Ultimate.alloc(5); [L4184] call write~init~int(118, #t~string307.base, #t~string307.offset, 1); [L4184] call write~init~int(100, #t~string307.base, 1 + #t~string307.offset, 1); [L4184] call write~init~int(37, #t~string307.base, 2 + #t~string307.offset, 1); [L4184] call write~init~int(99, #t~string307.base, 3 + #t~string307.offset, 1); [L4184] call write~init~int(0, #t~string307.base, 4 + #t~string307.offset, 1); [L4187] call #t~string310.base, #t~string310.offset := #Ultimate.alloc(7); [L4187] call write~init~int(118, #t~string310.base, #t~string310.offset, 1); [L4187] call write~init~int(100, #t~string310.base, 1 + #t~string310.offset, 1); [L4187] call write~init~int(37, #t~string310.base, 2 + #t~string310.offset, 1); [L4187] call write~init~int(99, #t~string310.base, 3 + #t~string310.offset, 1); [L4187] call write~init~int(37, #t~string310.base, 4 + #t~string310.offset, 1); [L4187] call write~init~int(99, #t~string310.base, 5 + #t~string310.offset, 1); [L4187] call write~init~int(0, #t~string310.base, 6 + #t~string310.offset, 1); [L4192] call #t~string313.base, #t~string313.offset := #Ultimate.alloc(9); [L4307] call #t~string388.base, #t~string388.offset := #Ultimate.alloc(11); [L4314] call #t~string389.base, #t~string389.offset := #Ultimate.alloc(8); [L4329] call #t~string392.base, #t~string392.offset := #Ultimate.alloc(8); [L3729] ~major~0 := 0; [L3730] ~index~0 := 0; [L4303-L4306] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36); [L4303-L4306] call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4); [L4303-L4306] call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4); [L4339] ~LDV_IN_INTERRUPT~0 := 0; [L4510] ~ldv_blk_rq~0 := 0; [L4084-L4085] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8); [L4301-L4302] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16); [L4301-L4302] call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4); [L4301-L4302] call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4); [L4301-L4302] call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4); [L4301-L4302] call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4); [L4307-L4308] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141); [L4307-L4308] call write~init~$Pointer$(#t~string388.base, #t~string388.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4); [L4307-L4308] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8); [L4334] ~__mod_virtio_device_table~0.device := 0; [L4334] ~__mod_virtio_device_table~0.vendor := 0; [?] havoc main_#res; [?] havoc main_#t~ret393, main_#t~nondet394, main_#t~switch395, main_#t~ret396, main_#t~ret397, main_#t~nondet398, main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0.base, main_~var_group2~0.offset, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8; [L4342] havoc main_~var_group1~0.base, main_~var_group1~0.offset; [L4343] havoc main_~var_virtblk_ioctl_5_p1~0; [L4344] havoc main_~var_virtblk_ioctl_5_p2~0; [L4345] havoc main_~var_virtblk_ioctl_5_p3~0; [L4346] havoc main_~var_group2~0.base, main_~var_group2~0.offset; [L4347] havoc main_~tmp~21; [L4348] havoc main_~tmp___0~13; [L4349] havoc main_~tmp___1~8; [L4352] ~LDV_IN_INTERRUPT~0 := 1; [L4353] call ldv_initialize(); [L4354] call ldv_handler_precall(); [L4355] havoc init_#res; [L4355] havoc init_#t~ret390, init_#t~ret391, init_~tmp~20; [L4311] havoc init_~tmp~20; [L4314] call init_#t~ret390 := register_blkdev(0, #t~string389.base, #t~string389.offset); [L4314] assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647; [L4314] ~major~0 := init_#t~ret390; [L4314] havoc init_#t~ret390; [L4315-L4319] assume !(~major~0 < 0); [L4320] call init_#t~ret391 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4320] assume -2147483648 <= init_#t~ret391 && init_#t~ret391 <= 2147483647; [L4320] init_~tmp~20 := init_#t~ret391; [L4320] havoc init_#t~ret391; [L4321] init_#res := init_~tmp~20; [L4355] main_#t~ret393 := init_#res; [L4355] assume -2147483648 <= main_#t~ret393 && main_#t~ret393 <= 2147483647; [L4355] main_~tmp~21 := main_#t~ret393; [L4355] havoc main_#t~ret393; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4356-L4360] assume !(0 != main_~tmp~21); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647; [L4378] main_~tmp___1~8 := main_#t~nondet398; [L4378] havoc main_#t~nondet398; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp___1~8=-1, main_~tmp~21=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379-L4383] assume 0 != main_~tmp___1~8; [L4363] assume -2147483648 <= main_#t~nondet394 && main_#t~nondet394 <= 2147483647; [L4363] main_~tmp___0~13 := main_#t~nondet394; [L4363] havoc main_#t~nondet394; [L4365] main_#t~switch395 := 0 == main_~tmp___0~13; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4365] assume main_#t~switch395; [L4366] call ldv_handler_precall(); [L4367] virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0; [L4367] havoc virtblk_ioctl_#res; [L4367] havoc virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset, virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~ret268, virtblk_ioctl_#t~mem269.base, virtblk_ioctl_#t~mem269.offset, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271.base, virtblk_ioctl_#t~mem271.offset, virtblk_ioctl_#t~ret272, virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset, virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, virtblk_ioctl_~err~2, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4013-L4060] virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset := virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset; [L4013-L4060] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4013-L4060] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4013-L4060] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4016] havoc virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset; [L4017] havoc virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset; [L4018] havoc virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset; [L4019] call virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset := #Ultimate.alloc(20); [L4020] havoc virtblk_ioctl_~err~2; [L4021] havoc virtblk_ioctl_~tmp~16; [L4022] havoc virtblk_ioctl_~tmp___0~10; [L4023] havoc virtblk_ioctl_~tmp___1~6; [L4024] havoc virtblk_ioctl_~tmp___2~2; [L4027] call virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset := read~$Pointer$(virtblk_ioctl_~bdev.base, 240 + virtblk_ioctl_~bdev.offset, 8); [L4027] virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset := virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset; [L4027] havoc virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset; [L4028] call virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset := read~$Pointer$(virtblk_ioctl_~disk~0.base, 1075 + virtblk_ioctl_~disk~0.offset, 8); [L4028] virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset := virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset; [L4028] havoc virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4029-L4045] assume 1447184708 == virtblk_ioctl_~cmd % 4294967296; [L4030] virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset := 0, (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4031] virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset, virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset := virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; [L4031] havoc virtblk_get_id_#res; [L4031] havoc virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset, virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset, virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset, virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset, virtblk_get_id_#t~ret254, virtblk_get_id_#t~ret255, virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset, virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset, virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset, virtblk_get_id_#t~ret259, virtblk_get_id_#t~ret260, virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset, virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset, virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset, virtblk_get_id_#t~ret264, virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, virtblk_get_id_~err~1, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1; [L3977-L4012] virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset := virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset; [L3977-L4012] virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset := virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset; [L3979] havoc virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset; [L3980] havoc virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset; [L3981] havoc virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset; [L3982] havoc virtblk_get_id_~err~1; [L3983] havoc virtblk_get_id_~tmp~15; [L3984] havoc virtblk_get_id_~tmp___0~9; [L3985] havoc virtblk_get_id_~tmp___1~5; [L3986] havoc virtblk_get_id_~tmp___2~1; [L3989] call virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset := read~$Pointer$(virtblk_get_id_~disk.base, 1075 + virtblk_get_id_~disk.offset, 8); [L3989] virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset := virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset; [L3989] havoc virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset; [L3990] call virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L3990] call virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset := read~$Pointer$(virtblk_get_id_#t~mem251.base, 1067 + virtblk_get_id_#t~mem251.offset, 8); [L3990] call virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset := bio_map_kern(virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, 20, 208); [L3990] virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset := virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset; [L3990] havoc virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset; [L3990] havoc virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset; [L3990] havoc virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] CALL call virtblk_get_id_#t~ret254 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4412] havoc ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4463] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3513] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4415] RET call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret401=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3120] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3991] RET call virtblk_get_id_#t~ret254 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret254=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] assume -9223372036854775808 <= virtblk_get_id_#t~ret254 && virtblk_get_id_#t~ret254 <= 9223372036854775807; [L3991] virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret254; [L3991] havoc virtblk_get_id_#t~ret254; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3992-L3997] assume !(0 != virtblk_get_id_~tmp___0~9); [L3998] call virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L3998] call virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset := read~$Pointer$(virtblk_get_id_#t~mem256.base, 1067 + virtblk_get_id_#t~mem256.offset, 8); [L3998] ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset, ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, 208; [L3998] havoc ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L3998] havoc ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset, ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset := ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset := ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4422] havoc ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset; [L4423] havoc ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4426] call ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3); [L4426] ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset := ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset; [L4426] havoc ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset; [L4427] ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset := ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4428] ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~ldv_func_arg3; [L4428] havoc ldv_get_blk_rq_#t~ret405, ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28; [L4511-L4536] ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset := ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset; [L4511-L4536] ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask; [L4513] havoc ldv_get_blk_rq_~tmp~28; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem256.base=43, virtblk_get_id_#t~mem256.offset=3986, virtblk_get_id_#t~mem257.base=35, virtblk_get_id_#t~mem257.offset=39, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4516-L4520] assume 0 == ~ldv_blk_rq~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem256.base=43, virtblk_get_id_#t~mem256.offset=3986, virtblk_get_id_#t~mem257.base=35, virtblk_get_id_#t~mem257.offset=39, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4521-L4533] assume (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296; [L4522] ~ldv_blk_rq~0 := 1; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem256.base=43, virtblk_get_id_#t~mem256.offset=3986, virtblk_get_id_#t~mem257.base=35, virtblk_get_id_#t~mem257.offset=39, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4429] ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset; [L3998] virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset := ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L3998] virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset := virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset; [L3998] havoc virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset; [L3998] havoc virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset; [L3998] havoc virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] CALL call virtblk_get_id_#t~ret259 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4412] havoc ~tmp~24; VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4463] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3513] ensures true; VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #res=1, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115] [L4415] RET call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~ret401=1, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3120] ensures true; VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #res=1, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115, ~tmp~24=1] [L3999] RET call virtblk_get_id_#t~ret259 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret259=1, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] assume -9223372036854775808 <= virtblk_get_id_#t~ret259 && virtblk_get_id_#t~ret259 <= 9223372036854775807; [L3999] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret259; [L3999] havoc virtblk_get_id_#t~ret259; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4000-L4006] assume 0 != virtblk_get_id_~tmp___2~1; [L4001] call bio_put(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] CALL call virtblk_get_id_#t~ret260 := PTR_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4401-L4409] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4403] havoc ~tmp~23; [L4406] ldv_ptr_err_#in~ptr.base, ldv_ptr_err_#in~ptr.offset := ~ptr.base, ~ptr.offset; [L4406] havoc ldv_ptr_err_#res; [L4406] havoc ldv_ptr_err_~ptr.base, ldv_ptr_err_~ptr.offset; [L4474-L4481] ldv_ptr_err_~ptr.base, ldv_ptr_err_~ptr.offset := ldv_ptr_err_#in~ptr.base, ldv_ptr_err_#in~ptr.offset; [L4479] ldv_ptr_err_#res := (if (2012 - (ldv_ptr_err_~ptr.base + ldv_ptr_err_~ptr.offset)) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (2012 - (ldv_ptr_err_~ptr.base + ldv_ptr_err_~ptr.offset)) % 18446744073709551616 % 18446744073709551616 else (2012 - (ldv_ptr_err_~ptr.base + ldv_ptr_err_~ptr.offset)) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4406] #t~ret400 := ldv_ptr_err_#res; [L4406] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4406] ~tmp~23 := #t~ret400; [L4406] havoc #t~ret400; [L4407] #res := ~tmp~23; [L3119] ensures true; VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #res=9223372032559808512, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ldv_ptr_err_#in~ptr.base=-1, ldv_ptr_err_#in~ptr.offset=-27670116106269358115, ldv_ptr_err_#res=9223372032559808512, ldv_ptr_err_~ptr.base=-1, ldv_ptr_err_~ptr.offset=-27670116106269358115, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115, ~tmp~23=9223372032559808512] [L4002] RET call virtblk_get_id_#t~ret260 := PTR_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret260=9223372032559808512, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] assume -9223372036854775808 <= virtblk_get_id_#t~ret260 && virtblk_get_id_#t~ret260 <= 9223372036854775807; [L4002] virtblk_get_id_~tmp___1~5 := virtblk_get_id_#t~ret260; [L4002] havoc virtblk_get_id_#t~ret260; [L4003] virtblk_get_id_#res := (if virtblk_get_id_~tmp___1~5 % 4294967296 <= 2147483647 then virtblk_get_id_~tmp___1~5 % 4294967296 else virtblk_get_id_~tmp___1~5 % 4294967296 - 4294967296); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4031] virtblk_ioctl_#t~ret267 := virtblk_get_id_#res; [L4031] assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647; [L4031] virtblk_ioctl_~err~2 := virtblk_ioctl_#t~ret267; [L4031] havoc virtblk_ioctl_#t~ret267; [L4032-L4041] assume 0 == virtblk_ioctl_~err~2; [L4033] copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset, copy_to_user_#in~src.base, copy_to_user_#in~src.offset, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, 20; [L4033] havoc copy_to_user_#res; [L4033] havoc copy_to_user_#t~ret33, copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size, copy_to_user_~tmp~0; [L3215-L3224] copy_to_user_~dst.base, copy_to_user_~dst.offset := copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset; [L3215-L3224] copy_to_user_~src.base, copy_to_user_~src.offset := copy_to_user_#in~src.base, copy_to_user_#in~src.offset; [L3215-L3224] copy_to_user_~size := copy_to_user_#in~size; [L3217] havoc copy_to_user_~tmp~0; [L3220] call might_fault(); [L3221] call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size); [L3221] copy_to_user_~tmp~0 := copy_to_user_#t~ret33; [L3221] havoc copy_to_user_#t~ret33; [L3222] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4033] virtblk_ioctl_#t~ret268 := copy_to_user_#res; [L4033] assume -2147483648 <= virtblk_ioctl_#t~ret268 && virtblk_ioctl_#t~ret268 <= 2147483647; [L4033] virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret268; [L4033] havoc virtblk_ioctl_#t~ret268; [L4034-L4038] assume !(0 != virtblk_ioctl_~tmp~16); [L4042] virtblk_ioctl_#res := virtblk_ioctl_~err~2; [L4019] call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset); [L4042] havoc virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4367] main_#t~ret396 := virtblk_ioctl_#res; [L4367] assume -2147483648 <= main_#t~ret396 && main_#t~ret396 <= 2147483647; [L4367] havoc main_#t~ret396; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647; [L4378] main_~tmp___1~8 := main_#t~nondet398; [L4378] havoc main_#t~nondet398; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379-L4383] assume !(0 != main_~tmp___1~8); [L4385] call ldv_handler_precall(); [L4329] call unregister_blkdev(~major~0, #t~string392.base, #t~string392.offset); [L4330] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4556-L4560] assume !(0 == ~ldv_blk_rq~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4559] CALL call ldv_error(); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4447] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L3328] call #t~string109.base, #t~string109.offset := #Ultimate.alloc(28); [L4146] call #t~string290.base, #t~string290.offset := #Ultimate.alloc(22); [L4150] call #t~string293.base, #t~string293.offset := #Ultimate.alloc(9); [L4184] call #t~string307.base, #t~string307.offset := #Ultimate.alloc(5); [L4184] call write~init~int(118, #t~string307.base, #t~string307.offset, 1); [L4184] call write~init~int(100, #t~string307.base, 1 + #t~string307.offset, 1); [L4184] call write~init~int(37, #t~string307.base, 2 + #t~string307.offset, 1); [L4184] call write~init~int(99, #t~string307.base, 3 + #t~string307.offset, 1); [L4184] call write~init~int(0, #t~string307.base, 4 + #t~string307.offset, 1); [L4187] call #t~string310.base, #t~string310.offset := #Ultimate.alloc(7); [L4187] call write~init~int(118, #t~string310.base, #t~string310.offset, 1); [L4187] call write~init~int(100, #t~string310.base, 1 + #t~string310.offset, 1); [L4187] call write~init~int(37, #t~string310.base, 2 + #t~string310.offset, 1); [L4187] call write~init~int(99, #t~string310.base, 3 + #t~string310.offset, 1); [L4187] call write~init~int(37, #t~string310.base, 4 + #t~string310.offset, 1); [L4187] call write~init~int(99, #t~string310.base, 5 + #t~string310.offset, 1); [L4187] call write~init~int(0, #t~string310.base, 6 + #t~string310.offset, 1); [L4192] call #t~string313.base, #t~string313.offset := #Ultimate.alloc(9); [L4307] call #t~string388.base, #t~string388.offset := #Ultimate.alloc(11); [L4314] call #t~string389.base, #t~string389.offset := #Ultimate.alloc(8); [L4329] call #t~string392.base, #t~string392.offset := #Ultimate.alloc(8); [L3729] ~major~0 := 0; [L3730] ~index~0 := 0; [L4303-L4306] call ~#features~0.base, ~#features~0.offset := #Ultimate.alloc(36); [L4303-L4306] call write~init~int(0, ~#features~0.base, ~#features~0.offset, 4); [L4303-L4306] call write~init~int(2, ~#features~0.base, 4 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(1, ~#features~0.base, 8 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(4, ~#features~0.base, 12 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(5, ~#features~0.base, 16 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(6, ~#features~0.base, 20 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(7, ~#features~0.base, 24 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(9, ~#features~0.base, 28 + ~#features~0.offset, 4); [L4303-L4306] call write~init~int(10, ~#features~0.base, 32 + ~#features~0.offset, 4); [L4339] ~LDV_IN_INTERRUPT~0 := 0; [L4510] ~ldv_blk_rq~0 := 0; [L4084-L4085] call ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset := #Ultimate.alloc(96); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 8 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(#funAddr~virtblk_ioctl.base, #funAddr~virtblk_ioctl.offset, ~#virtblk_fops~0.base, 16 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 24 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 32 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 40 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 48 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 56 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 64 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(#funAddr~virtblk_getgeo.base, #funAddr~virtblk_getgeo.offset, ~#virtblk_fops~0.base, 72 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(0, 0, ~#virtblk_fops~0.base, 80 + ~#virtblk_fops~0.offset, 8); [L4084-L4085] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtblk_fops~0.base, 88 + ~#virtblk_fops~0.offset, 8); [L4301-L4302] call ~#id_table~0.base, ~#id_table~0.offset := #Ultimate.alloc(16); [L4301-L4302] call write~init~int(2, ~#id_table~0.base, ~#id_table~0.offset, 4); [L4301-L4302] call write~init~int(4294967295, ~#id_table~0.base, 4 + ~#id_table~0.offset, 4); [L4301-L4302] call write~init~int(0, ~#id_table~0.base, 8 + ~#id_table~0.offset, 4); [L4301-L4302] call write~init~int(0, ~#id_table~0.base, 12 + ~#id_table~0.offset, 4); [L4307-L4308] call ~#virtio_blk~0.base, ~#virtio_blk~0.offset := #Ultimate.alloc(141); [L4307-L4308] call write~init~$Pointer$(#t~string388.base, #t~string388.offset, ~#virtio_blk~0.base, ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 8 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#virtio_blk~0.base, 16 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 24 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~int(0, ~#virtio_blk~0.base, 32 + ~#virtio_blk~0.offset, 1); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 33 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 41 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 49 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 57 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 65 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 73 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 81 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 89 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(~#id_table~0.base, ~#id_table~0.offset, ~#virtio_blk~0.base, 97 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(~#features~0.base, ~#features~0.offset, ~#virtio_blk~0.base, 105 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~int(9, ~#virtio_blk~0.base, 113 + ~#virtio_blk~0.offset, 4); [L4307-L4308] call write~init~$Pointer$(#funAddr~virtblk_probe.base, #funAddr~virtblk_probe.offset, ~#virtio_blk~0.base, 117 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(#funAddr~virtblk_remove.base, #funAddr~virtblk_remove.offset, ~#virtio_blk~0.base, 125 + ~#virtio_blk~0.offset, 8); [L4307-L4308] call write~init~$Pointer$(0, 0, ~#virtio_blk~0.base, 133 + ~#virtio_blk~0.offset, 8); [L4334] ~__mod_virtio_device_table~0.device := 0; [L4334] ~__mod_virtio_device_table~0.vendor := 0; [?] havoc main_#res; [?] havoc main_#t~ret393, main_#t~nondet394, main_#t~switch395, main_#t~ret396, main_#t~ret397, main_#t~nondet398, main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0.base, main_~var_group2~0.offset, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8; [L4342] havoc main_~var_group1~0.base, main_~var_group1~0.offset; [L4343] havoc main_~var_virtblk_ioctl_5_p1~0; [L4344] havoc main_~var_virtblk_ioctl_5_p2~0; [L4345] havoc main_~var_virtblk_ioctl_5_p3~0; [L4346] havoc main_~var_group2~0.base, main_~var_group2~0.offset; [L4347] havoc main_~tmp~21; [L4348] havoc main_~tmp___0~13; [L4349] havoc main_~tmp___1~8; [L4352] ~LDV_IN_INTERRUPT~0 := 1; [L4353] call ldv_initialize(); [L4354] call ldv_handler_precall(); [L4355] havoc init_#res; [L4355] havoc init_#t~ret390, init_#t~ret391, init_~tmp~20; [L4311] havoc init_~tmp~20; [L4314] call init_#t~ret390 := register_blkdev(0, #t~string389.base, #t~string389.offset); [L4314] assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647; [L4314] ~major~0 := init_#t~ret390; [L4314] havoc init_#t~ret390; [L4315-L4319] assume !(~major~0 < 0); [L4320] call init_#t~ret391 := register_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); [L4320] assume -2147483648 <= init_#t~ret391 && init_#t~ret391 <= 2147483647; [L4320] init_~tmp~20 := init_#t~ret391; [L4320] havoc init_#t~ret391; [L4321] init_#res := init_~tmp~20; [L4355] main_#t~ret393 := init_#res; [L4355] assume -2147483648 <= main_#t~ret393 && main_#t~ret393 <= 2147483647; [L4355] main_~tmp~21 := main_#t~ret393; [L4355] havoc main_#t~ret393; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4356-L4360] assume !(0 != main_~tmp~21); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647; [L4378] main_~tmp___1~8 := main_#t~nondet398; [L4378] havoc main_#t~nondet398; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp___1~8=-1, main_~tmp~21=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379-L4383] assume 0 != main_~tmp___1~8; [L4363] assume -2147483648 <= main_#t~nondet394 && main_#t~nondet394 <= 2147483647; [L4363] main_~tmp___0~13 := main_#t~nondet394; [L4363] havoc main_#t~nondet394; [L4365] main_#t~switch395 := 0 == main_~tmp___0~13; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4365] assume main_#t~switch395; [L4366] call ldv_handler_precall(); [L4367] virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0.base, main_~var_group1~0.offset, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0; [L4367] havoc virtblk_ioctl_#res; [L4367] havoc virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset, virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~ret268, virtblk_ioctl_#t~mem269.base, virtblk_ioctl_#t~mem269.offset, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271.base, virtblk_ioctl_#t~mem271.offset, virtblk_ioctl_#t~ret272, virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset, virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, virtblk_ioctl_~err~2, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4013-L4060] virtblk_ioctl_~bdev.base, virtblk_ioctl_~bdev.offset := virtblk_ioctl_#in~bdev.base, virtblk_ioctl_#in~bdev.offset; [L4013-L4060] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4013-L4060] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4013-L4060] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4016] havoc virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset; [L4017] havoc virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset; [L4018] havoc virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset; [L4019] call virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset := #Ultimate.alloc(20); [L4020] havoc virtblk_ioctl_~err~2; [L4021] havoc virtblk_ioctl_~tmp~16; [L4022] havoc virtblk_ioctl_~tmp___0~10; [L4023] havoc virtblk_ioctl_~tmp___1~6; [L4024] havoc virtblk_ioctl_~tmp___2~2; [L4027] call virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset := read~$Pointer$(virtblk_ioctl_~bdev.base, 240 + virtblk_ioctl_~bdev.offset, 8); [L4027] virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset := virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset; [L4027] havoc virtblk_ioctl_#t~mem265.base, virtblk_ioctl_#t~mem265.offset; [L4028] call virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset := read~$Pointer$(virtblk_ioctl_~disk~0.base, 1075 + virtblk_ioctl_~disk~0.offset, 8); [L4028] virtblk_ioctl_~vblk~3.base, virtblk_ioctl_~vblk~3.offset := virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset; [L4028] havoc virtblk_ioctl_#t~mem266.base, virtblk_ioctl_#t~mem266.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4029-L4045] assume 1447184708 == virtblk_ioctl_~cmd % 4294967296; [L4030] virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset := 0, (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4031] virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset, virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset := virtblk_ioctl_~disk~0.base, virtblk_ioctl_~disk~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; [L4031] havoc virtblk_get_id_#res; [L4031] havoc virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset, virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset, virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset, virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset, virtblk_get_id_#t~ret254, virtblk_get_id_#t~ret255, virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset, virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset, virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset, virtblk_get_id_#t~ret259, virtblk_get_id_#t~ret260, virtblk_get_id_#t~mem261.base, virtblk_get_id_#t~mem261.offset, virtblk_get_id_#t~mem262.base, virtblk_get_id_#t~mem262.offset, virtblk_get_id_#t~mem263.base, virtblk_get_id_#t~mem263.offset, virtblk_get_id_#t~ret264, virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset, virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, virtblk_get_id_~err~1, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1; [L3977-L4012] virtblk_get_id_~disk.base, virtblk_get_id_~disk.offset := virtblk_get_id_#in~disk.base, virtblk_get_id_#in~disk.offset; [L3977-L4012] virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset := virtblk_get_id_#in~id_str.base, virtblk_get_id_#in~id_str.offset; [L3979] havoc virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset; [L3980] havoc virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset; [L3981] havoc virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset; [L3982] havoc virtblk_get_id_~err~1; [L3983] havoc virtblk_get_id_~tmp~15; [L3984] havoc virtblk_get_id_~tmp___0~9; [L3985] havoc virtblk_get_id_~tmp___1~5; [L3986] havoc virtblk_get_id_~tmp___2~1; [L3989] call virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset := read~$Pointer$(virtblk_get_id_~disk.base, 1075 + virtblk_get_id_~disk.offset, 8); [L3989] virtblk_get_id_~vblk~2.base, virtblk_get_id_~vblk~2.offset := virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset; [L3989] havoc virtblk_get_id_#t~mem250.base, virtblk_get_id_#t~mem250.offset; [L3990] call virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L3990] call virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset := read~$Pointer$(virtblk_get_id_#t~mem251.base, 1067 + virtblk_get_id_#t~mem251.offset, 8); [L3990] call virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset := bio_map_kern(virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset, virtblk_get_id_~id_str.base, virtblk_get_id_~id_str.offset, 20, 208); [L3990] virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset := virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset; [L3990] havoc virtblk_get_id_#t~mem252.base, virtblk_get_id_#t~mem252.offset; [L3990] havoc virtblk_get_id_#t~ret253.base, virtblk_get_id_#t~ret253.offset; [L3990] havoc virtblk_get_id_#t~mem251.base, virtblk_get_id_#t~mem251.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] CALL call virtblk_get_id_#t~ret254 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4412] havoc ~tmp~24; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4463] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3513] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4415] RET call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~ret401=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3120] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=0, ~ptr.offset=0, ~tmp~24=0] [L3991] RET call virtblk_get_id_#t~ret254 := IS_ERR(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret254=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] assume -9223372036854775808 <= virtblk_get_id_#t~ret254 && virtblk_get_id_#t~ret254 <= 9223372036854775807; [L3991] virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret254; [L3991] havoc virtblk_get_id_#t~ret254; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3992-L3997] assume !(0 != virtblk_get_id_~tmp___0~9); [L3998] call virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset := read~$Pointer$(virtblk_get_id_~vblk~2.base, 72 + virtblk_get_id_~vblk~2.offset, 8); [L3998] call virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset := read~$Pointer$(virtblk_get_id_#t~mem256.base, 1067 + virtblk_get_id_#t~mem256.offset, 8); [L3998] ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset, ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset, virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset, 208; [L3998] havoc ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L3998] havoc ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset, ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset := ldv_blk_make_request_5_#in~ldv_func_arg1.base, ldv_blk_make_request_5_#in~ldv_func_arg1.offset; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset := ldv_blk_make_request_5_#in~ldv_func_arg2.base, ldv_blk_make_request_5_#in~ldv_func_arg2.offset; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4422] havoc ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset; [L4423] havoc ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4426] call ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1.base, ldv_blk_make_request_5_~ldv_func_arg1.offset, ldv_blk_make_request_5_~ldv_func_arg2.base, ldv_blk_make_request_5_~ldv_func_arg2.offset, ldv_blk_make_request_5_~ldv_func_arg3); [L4426] ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset := ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset; [L4426] havoc ldv_blk_make_request_5_#t~ret402.base, ldv_blk_make_request_5_#t~ret402.offset; [L4427] ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset := ldv_blk_make_request_5_~tmp~25.base, ldv_blk_make_request_5_~tmp~25.offset; [L4428] ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset, ldv_blk_make_request_5_~ldv_func_arg3; [L4428] havoc ldv_get_blk_rq_#t~ret405, ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28; [L4511-L4536] ldv_get_blk_rq_~res.base, ldv_get_blk_rq_~res.offset := ldv_get_blk_rq_#in~res.base, ldv_get_blk_rq_#in~res.offset; [L4511-L4536] ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask; [L4513] havoc ldv_get_blk_rq_~tmp~28; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem256.base=43, virtblk_get_id_#t~mem256.offset=3986, virtblk_get_id_#t~mem257.base=35, virtblk_get_id_#t~mem257.offset=39, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4516-L4520] assume 0 == ~ldv_blk_rq~0; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem256.base=43, virtblk_get_id_#t~mem256.offset=3986, virtblk_get_id_#t~mem257.base=35, virtblk_get_id_#t~mem257.offset=39, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4521-L4533] assume (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296; [L4522] ~ldv_blk_rq~0 := 1; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~mem256.base=43, virtblk_get_id_#t~mem256.offset=3986, virtblk_get_id_#t~mem257.base=35, virtblk_get_id_#t~mem257.offset=39, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4429] ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset := ldv_blk_make_request_5_~ldv_func_res~0.base, ldv_blk_make_request_5_~ldv_func_res~0.offset; [L3998] virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset := ldv_blk_make_request_5_#res.base, ldv_blk_make_request_5_#res.offset; [L3998] virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset := virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset; [L3998] havoc virtblk_get_id_#t~mem257.base, virtblk_get_id_#t~mem257.offset; [L3998] havoc virtblk_get_id_#t~mem256.base, virtblk_get_id_#t~mem256.offset; [L3998] havoc virtblk_get_id_#t~ret258.base, virtblk_get_id_#t~ret258.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] CALL call virtblk_get_id_#t~ret259 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4412] havoc ~tmp~24; VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4463] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L3513] ensures true; VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #res=1, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115] [L4415] RET call #t~ret401 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~ret401=1, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3120] ensures true; VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #res=1, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115, ~tmp~24=1] [L3999] RET call virtblk_get_id_#t~ret259 := IS_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret259=1, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] assume -9223372036854775808 <= virtblk_get_id_#t~ret259 && virtblk_get_id_#t~ret259 <= 9223372036854775807; [L3999] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret259; [L3999] havoc virtblk_get_id_#t~ret259; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4000-L4006] assume 0 != virtblk_get_id_~tmp___2~1; [L4001] call bio_put(virtblk_get_id_~bio~0.base, virtblk_get_id_~bio~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] CALL call virtblk_get_id_#t~ret260 := PTR_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4401-L4409] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L4403] havoc ~tmp~23; [L4406] ldv_ptr_err_#in~ptr.base, ldv_ptr_err_#in~ptr.offset := ~ptr.base, ~ptr.offset; [L4406] havoc ldv_ptr_err_#res; [L4406] havoc ldv_ptr_err_~ptr.base, ldv_ptr_err_~ptr.offset; [L4474-L4481] ldv_ptr_err_~ptr.base, ldv_ptr_err_~ptr.offset := ldv_ptr_err_#in~ptr.base, ldv_ptr_err_#in~ptr.offset; [L4479] ldv_ptr_err_#res := (if (2012 - (ldv_ptr_err_~ptr.base + ldv_ptr_err_~ptr.offset)) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (2012 - (ldv_ptr_err_~ptr.base + ldv_ptr_err_~ptr.offset)) % 18446744073709551616 % 18446744073709551616 else (2012 - (ldv_ptr_err_~ptr.base + ldv_ptr_err_~ptr.offset)) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4406] #t~ret400 := ldv_ptr_err_#res; [L4406] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4406] ~tmp~23 := #t~ret400; [L4406] havoc #t~ret400; [L4407] #res := ~tmp~23; [L3119] ensures true; VAL [#in~ptr.base=-1, #in~ptr.offset=-27670116106269358115, #NULL.base=0, #NULL.offset=0, #res=9223372032559808512, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ldv_ptr_err_#in~ptr.base=-1, ldv_ptr_err_#in~ptr.offset=-27670116106269358115, ldv_ptr_err_#res=9223372032559808512, ldv_ptr_err_~ptr.base=-1, ldv_ptr_err_~ptr.offset=-27670116106269358115, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr.base=-1, ~ptr.offset=-27670116106269358115, ~tmp~23=9223372032559808512] [L4002] RET call virtblk_get_id_#t~ret260 := PTR_ERR(virtblk_get_id_~req~1.base, virtblk_get_id_~req~1.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#t~ret260=9223372032559808512, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] assume -9223372036854775808 <= virtblk_get_id_#t~ret260 && virtblk_get_id_#t~ret260 <= 9223372036854775807; [L4002] virtblk_get_id_~tmp___1~5 := virtblk_get_id_#t~ret260; [L4002] havoc virtblk_get_id_#t~ret260; [L4003] virtblk_get_id_#res := (if virtblk_get_id_~tmp___1~5 % 4294967296 <= 2147483647 then virtblk_get_id_~tmp___1~5 % 4294967296 else virtblk_get_id_~tmp___1~5 % 4294967296 - 4294967296); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0.base=30, virtblk_ioctl_~#id_str~0.offset=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4031] virtblk_ioctl_#t~ret267 := virtblk_get_id_#res; [L4031] assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647; [L4031] virtblk_ioctl_~err~2 := virtblk_ioctl_#t~ret267; [L4031] havoc virtblk_ioctl_#t~ret267; [L4032-L4041] assume 0 == virtblk_ioctl_~err~2; [L4033] copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset, copy_to_user_#in~src.base, copy_to_user_#in~src.offset, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0.base, virtblk_ioctl_~usr_data~0.offset, virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset, 20; [L4033] havoc copy_to_user_#res; [L4033] havoc copy_to_user_#t~ret33, copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size, copy_to_user_~tmp~0; [L3215-L3224] copy_to_user_~dst.base, copy_to_user_~dst.offset := copy_to_user_#in~dst.base, copy_to_user_#in~dst.offset; [L3215-L3224] copy_to_user_~src.base, copy_to_user_~src.offset := copy_to_user_#in~src.base, copy_to_user_#in~src.offset; [L3215-L3224] copy_to_user_~size := copy_to_user_#in~size; [L3217] havoc copy_to_user_~tmp~0; [L3220] call might_fault(); [L3221] call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst.base, copy_to_user_~dst.offset, copy_to_user_~src.base, copy_to_user_~src.offset, copy_to_user_~size); [L3221] copy_to_user_~tmp~0 := copy_to_user_#t~ret33; [L3221] havoc copy_to_user_#t~ret33; [L3222] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4033] virtblk_ioctl_#t~ret268 := copy_to_user_#res; [L4033] assume -2147483648 <= virtblk_ioctl_#t~ret268 && virtblk_ioctl_#t~ret268 <= 2147483647; [L4033] virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret268; [L4033] havoc virtblk_ioctl_#t~ret268; [L4034-L4038] assume !(0 != virtblk_ioctl_~tmp~16); [L4042] virtblk_ioctl_#res := virtblk_ioctl_~err~2; [L4019] call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset); [L4042] havoc virtblk_ioctl_~#id_str~0.base, virtblk_ioctl_~#id_str~0.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4367] main_#t~ret396 := virtblk_ioctl_#res; [L4367] assume -2147483648 <= main_#t~ret396 && main_#t~ret396 <= 2147483647; [L4367] havoc main_#t~ret396; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647; [L4378] main_~tmp___1~8 := main_#t~nondet398; [L4378] havoc main_#t~nondet398; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379-L4383] assume !(0 != main_~tmp___1~8); [L4385] call ldv_handler_precall(); [L4329] call unregister_blkdev(~major~0, #t~string392.base, #t~string392.offset); [L4330] call unregister_virtio_driver(~#virtio_blk~0.base, ~#virtio_blk~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4556-L4560] assume !(0 == ~ldv_blk_rq~0); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, copy_to_user_#in~dst.base=0, copy_to_user_#in~dst.offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src.base=30, copy_to_user_#in~src.offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst.base=0, copy_to_user_~dst.offset=0, copy_to_user_~size=20, copy_to_user_~src.base=30, copy_to_user_~src.offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1.base=35, ldv_blk_make_request_5_#in~ldv_func_arg1.offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2.base=0, ldv_blk_make_request_5_#in~ldv_func_arg2.offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res.base=-1, ldv_blk_make_request_5_#res.offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1.base=35, ldv_blk_make_request_5_~ldv_func_arg1.offset=39, ldv_blk_make_request_5_~ldv_func_arg2.base=0, ldv_blk_make_request_5_~ldv_func_arg2.offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0.base=-1, ldv_blk_make_request_5_~ldv_func_res~0.offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25.base=-1, ldv_blk_make_request_5_~tmp~25.offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res.base=-1, ldv_get_blk_rq_#in~res.offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res.base=-1, ldv_get_blk_rq_~res.offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0.base=76, main_~var_group1~0.offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk.base=47, virtblk_get_id_#in~disk.offset=1872, virtblk_get_id_#in~id_str.base=30, virtblk_get_id_#in~id_str.offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0.base=0, virtblk_get_id_~bio~0.offset=0, virtblk_get_id_~disk.base=47, virtblk_get_id_~disk.offset=1872, virtblk_get_id_~id_str.base=30, virtblk_get_id_~id_str.offset=0, virtblk_get_id_~req~1.base=-1, virtblk_get_id_~req~1.offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2.base=51, virtblk_get_id_~vblk~2.offset=6121, virtblk_ioctl_#in~bdev.base=76, virtblk_ioctl_#in~bdev.offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev.base=76, virtblk_ioctl_~bdev.offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0.base=47, virtblk_ioctl_~disk~0.offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0.base=0, virtblk_ioctl_~usr_data~0.offset=0, virtblk_ioctl_~vblk~3.base=51, virtblk_ioctl_~vblk~3.offset=6121, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4559] CALL call ldv_error(); VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4447] assert false; VAL [#NULL.base=0, #NULL.offset=0, #t~string109.base=29, #t~string109.offset=0, #t~string290.base=19, #t~string290.offset=0, #t~string293.base=27, #t~string293.offset=0, #t~string307.base=13, #t~string307.offset=0, #t~string310.base=23, #t~string310.offset=0, #t~string313.base=14, #t~string313.offset=0, #t~string388.base=26, #t~string388.offset=0, #t~string389.base=17, #t~string389.offset=0, #t~string392.base=21, #t~string392.offset=0, ~#__this_module~0.base=62, ~#__this_module~0.offset=67, ~#features~0.base=25, ~#features~0.offset=0, ~#id_table~0.base=31, ~#id_table~0.offset=0, ~#virtblk_fops~0.base=18, ~#virtblk_fops~0.offset=0, ~#virtio_blk~0.base=15, ~#virtio_blk~0.offset=0, ~__mod_virtio_device_table~0.device=0, ~__mod_virtio_device_table~0.vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3328] FCALL call #t~string109 := #Ultimate.alloc(28); [L4146] FCALL call #t~string290 := #Ultimate.alloc(22); [L4150] FCALL call #t~string293 := #Ultimate.alloc(9); [L4184] FCALL call #t~string307 := #Ultimate.alloc(5); [L4184] FCALL call write~init~int(118, { base: #t~string307!base, offset: #t~string307!offset }, 1); [L4184] FCALL call write~init~int(100, { base: #t~string307!base, offset: 1 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(37, { base: #t~string307!base, offset: 2 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(99, { base: #t~string307!base, offset: 3 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(0, { base: #t~string307!base, offset: 4 + #t~string307!offset }, 1); [L4187] FCALL call #t~string310 := #Ultimate.alloc(7); [L4187] FCALL call write~init~int(118, { base: #t~string310!base, offset: #t~string310!offset }, 1); [L4187] FCALL call write~init~int(100, { base: #t~string310!base, offset: 1 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(37, { base: #t~string310!base, offset: 2 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(99, { base: #t~string310!base, offset: 3 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(37, { base: #t~string310!base, offset: 4 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(99, { base: #t~string310!base, offset: 5 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(0, { base: #t~string310!base, offset: 6 + #t~string310!offset }, 1); [L4192] FCALL call #t~string313 := #Ultimate.alloc(9); [L4307] FCALL call #t~string388 := #Ultimate.alloc(11); [L4314] FCALL call #t~string389 := #Ultimate.alloc(8); [L4329] FCALL call #t~string392 := #Ultimate.alloc(8); [L3729] ~major~0 := 0; [L3730] ~index~0 := 0; [L4303-L4306] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4303-L4306] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4339] ~LDV_IN_INTERRUPT~0 := 0; [L4510] ~ldv_blk_rq~0 := 0; [L4084-L4085] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4301-L4302] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4301-L4302] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4307-L4308] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4307-L4308] FCALL call write~init~$Pointer$(#t~string388, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4307-L4308] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4334] ~__mod_virtio_device_table~0!device := 0; [L4334] ~__mod_virtio_device_table~0!vendor := 0; [?] havoc main_#res; [?] havoc main_#t~ret393, main_#t~nondet394, main_#t~switch395, main_#t~ret396, main_#t~ret397, main_#t~nondet398, main_~var_group1~0, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8; [L4342] havoc main_~var_group1~0; [L4343] havoc main_~var_virtblk_ioctl_5_p1~0; [L4344] havoc main_~var_virtblk_ioctl_5_p2~0; [L4345] havoc main_~var_virtblk_ioctl_5_p3~0; [L4346] havoc main_~var_group2~0; [L4347] havoc main_~tmp~21; [L4348] havoc main_~tmp___0~13; [L4349] havoc main_~tmp___1~8; [L4352] ~LDV_IN_INTERRUPT~0 := 1; [L4353] FCALL call ldv_initialize(); [L4354] FCALL call ldv_handler_precall(); [L4355] havoc init_#res; [L4355] havoc init_#t~ret390, init_#t~ret391, init_~tmp~20; [L4311] havoc init_~tmp~20; [L4314] FCALL call init_#t~ret390 := register_blkdev(0, #t~string389); [L4314] assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647; [L4314] ~major~0 := init_#t~ret390; [L4314] havoc init_#t~ret390; [L4315] COND FALSE !(~major~0 < 0) [L4320] FCALL call init_#t~ret391 := register_virtio_driver(~#virtio_blk~0); [L4320] assume -2147483648 <= init_#t~ret391 && init_#t~ret391 <= 2147483647; [L4320] init_~tmp~20 := init_#t~ret391; [L4320] havoc init_#t~ret391; [L4321] init_#res := init_~tmp~20; [L4355] main_#t~ret393 := init_#res; [L4355] assume -2147483648 <= main_#t~ret393 && main_#t~ret393 <= 2147483647; [L4355] main_~tmp~21 := main_#t~ret393; [L4355] havoc main_#t~ret393; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4356] COND FALSE !(0 != main_~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647; [L4378] main_~tmp___1~8 := main_#t~nondet398; [L4378] havoc main_#t~nondet398; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp___1~8=-1, main_~tmp~21=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379] COND TRUE 0 != main_~tmp___1~8 [L4363] assume -2147483648 <= main_#t~nondet394 && main_#t~nondet394 <= 2147483647; [L4363] main_~tmp___0~13 := main_#t~nondet394; [L4363] havoc main_#t~nondet394; [L4365] main_#t~switch395 := 0 == main_~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4364-L4375] COND TRUE main_#t~switch395 [L4366] FCALL call ldv_handler_precall(); [L4367] virtblk_ioctl_#in~bdev, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0; [L4367] havoc virtblk_ioctl_#res; [L4367] havoc virtblk_ioctl_#t~mem265, virtblk_ioctl_#t~mem266, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~ret268, virtblk_ioctl_#t~mem269, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271, virtblk_ioctl_#t~ret272, virtblk_ioctl_~bdev, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0, virtblk_ioctl_~vblk~3, virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, virtblk_ioctl_~err~2, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4013-L4060] virtblk_ioctl_~bdev := virtblk_ioctl_#in~bdev; [L4013-L4060] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4013-L4060] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4013-L4060] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4016] havoc virtblk_ioctl_~disk~0; [L4017] havoc virtblk_ioctl_~vblk~3; [L4018] havoc virtblk_ioctl_~usr_data~0; [L4019] FCALL call virtblk_ioctl_~#id_str~0 := #Ultimate.alloc(20); [L4020] havoc virtblk_ioctl_~err~2; [L4021] havoc virtblk_ioctl_~tmp~16; [L4022] havoc virtblk_ioctl_~tmp___0~10; [L4023] havoc virtblk_ioctl_~tmp___1~6; [L4024] havoc virtblk_ioctl_~tmp___2~2; [L4027] FCALL call virtblk_ioctl_#t~mem265 := read~$Pointer$({ base: virtblk_ioctl_~bdev!base, offset: 240 + virtblk_ioctl_~bdev!offset }, 8); [L4027] virtblk_ioctl_~disk~0 := virtblk_ioctl_#t~mem265; [L4027] havoc virtblk_ioctl_#t~mem265; [L4028] FCALL call virtblk_ioctl_#t~mem266 := read~$Pointer$({ base: virtblk_ioctl_~disk~0!base, offset: 1075 + virtblk_ioctl_~disk~0!offset }, 8); [L4028] virtblk_ioctl_~vblk~3 := virtblk_ioctl_#t~mem266; [L4028] havoc virtblk_ioctl_#t~mem266; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4029] COND TRUE 1447184708 == virtblk_ioctl_~cmd % 4294967296 [L4030] virtblk_ioctl_~usr_data~0 := { base: 0, offset: (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L4031] virtblk_get_id_#in~disk, virtblk_get_id_#in~id_str := virtblk_ioctl_~disk~0, virtblk_ioctl_~#id_str~0; [L4031] havoc virtblk_get_id_#res; [L4031] havoc virtblk_get_id_#t~mem250, virtblk_get_id_#t~mem251, virtblk_get_id_#t~mem252, virtblk_get_id_#t~ret253, virtblk_get_id_#t~ret254, virtblk_get_id_#t~ret255, virtblk_get_id_#t~mem256, virtblk_get_id_#t~mem257, virtblk_get_id_#t~ret258, virtblk_get_id_#t~ret259, virtblk_get_id_#t~ret260, virtblk_get_id_#t~mem261, virtblk_get_id_#t~mem262, virtblk_get_id_#t~mem263, virtblk_get_id_#t~ret264, virtblk_get_id_~disk, virtblk_get_id_~id_str, virtblk_get_id_~vblk~2, virtblk_get_id_~req~1, virtblk_get_id_~bio~0, virtblk_get_id_~err~1, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1; [L3977-L4012] virtblk_get_id_~disk := virtblk_get_id_#in~disk; [L3977-L4012] virtblk_get_id_~id_str := virtblk_get_id_#in~id_str; [L3979] havoc virtblk_get_id_~vblk~2; [L3980] havoc virtblk_get_id_~req~1; [L3981] havoc virtblk_get_id_~bio~0; [L3982] havoc virtblk_get_id_~err~1; [L3983] havoc virtblk_get_id_~tmp~15; [L3984] havoc virtblk_get_id_~tmp___0~9; [L3985] havoc virtblk_get_id_~tmp___1~5; [L3986] havoc virtblk_get_id_~tmp___2~1; [L3989] FCALL call virtblk_get_id_#t~mem250 := read~$Pointer$({ base: virtblk_get_id_~disk!base, offset: 1075 + virtblk_get_id_~disk!offset }, 8); [L3989] virtblk_get_id_~vblk~2 := virtblk_get_id_#t~mem250; [L3989] havoc virtblk_get_id_#t~mem250; [L3990] FCALL call virtblk_get_id_#t~mem251 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L3990] FCALL call virtblk_get_id_#t~mem252 := read~$Pointer$({ base: virtblk_get_id_#t~mem251!base, offset: 1067 + virtblk_get_id_#t~mem251!offset }, 8); [L3990] FCALL call virtblk_get_id_#t~ret253 := bio_map_kern(virtblk_get_id_#t~mem252, virtblk_get_id_~id_str, 20, 208); [L3990] virtblk_get_id_~bio~0 := virtblk_get_id_#t~ret253; [L3990] havoc virtblk_get_id_#t~mem252; [L3990] havoc virtblk_get_id_#t~ret253; [L3990] havoc virtblk_get_id_#t~mem251; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] CALL call virtblk_get_id_#t~ret254 := IS_ERR(virtblk_get_id_~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr := #in~ptr; [L4412] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr := #in~ptr; [L4463] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4415] RET call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret401=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3991] RET call virtblk_get_id_#t~ret254 := IS_ERR(virtblk_get_id_~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret254=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] assume -9223372036854775808 <= virtblk_get_id_#t~ret254 && virtblk_get_id_#t~ret254 <= 9223372036854775807; [L3991] virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret254; [L3991] havoc virtblk_get_id_#t~ret254; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3992] COND FALSE !(0 != virtblk_get_id_~tmp___0~9) [L3998] FCALL call virtblk_get_id_#t~mem256 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L3998] FCALL call virtblk_get_id_#t~mem257 := read~$Pointer$({ base: virtblk_get_id_#t~mem256!base, offset: 1067 + virtblk_get_id_#t~mem256!offset }, 8); [L3998] ldv_blk_make_request_5_#in~ldv_func_arg1, ldv_blk_make_request_5_#in~ldv_func_arg2, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem257, virtblk_get_id_~bio~0, 208; [L3998] havoc ldv_blk_make_request_5_#res; [L3998] havoc ldv_blk_make_request_5_#t~ret402, ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0, ldv_blk_make_request_5_~tmp~25; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg1 := ldv_blk_make_request_5_#in~ldv_func_arg1; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg2 := ldv_blk_make_request_5_#in~ldv_func_arg2; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4422] havoc ldv_blk_make_request_5_~ldv_func_res~0; [L4423] havoc ldv_blk_make_request_5_~tmp~25; [L4426] FCALL call ldv_blk_make_request_5_#t~ret402 := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3); [L4426] ldv_blk_make_request_5_~tmp~25 := ldv_blk_make_request_5_#t~ret402; [L4426] havoc ldv_blk_make_request_5_#t~ret402; [L4427] ldv_blk_make_request_5_~ldv_func_res~0 := ldv_blk_make_request_5_~tmp~25; [L4428] ldv_get_blk_rq_#in~res, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0, ldv_blk_make_request_5_~ldv_func_arg3; [L4428] havoc ldv_get_blk_rq_#t~ret405, ldv_get_blk_rq_~res, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28; [L4511-L4536] ldv_get_blk_rq_~res := ldv_get_blk_rq_#in~res; [L4511-L4536] ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask; [L4513] havoc ldv_get_blk_rq_~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem256!base=43, virtblk_get_id_#t~mem256!offset=3986, virtblk_get_id_#t~mem257!base=35, virtblk_get_id_#t~mem257!offset=39, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4516] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem256!base=43, virtblk_get_id_#t~mem256!offset=3986, virtblk_get_id_#t~mem257!base=35, virtblk_get_id_#t~mem257!offset=39, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4521] COND TRUE (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296 [L4522] ~ldv_blk_rq~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem256!base=43, virtblk_get_id_#t~mem256!offset=3986, virtblk_get_id_#t~mem257!base=35, virtblk_get_id_#t~mem257!offset=39, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4429] ldv_blk_make_request_5_#res := ldv_blk_make_request_5_~ldv_func_res~0; [L3998] virtblk_get_id_#t~ret258 := ldv_blk_make_request_5_#res; [L3998] virtblk_get_id_~req~1 := virtblk_get_id_#t~ret258; [L3998] havoc virtblk_get_id_#t~mem257; [L3998] havoc virtblk_get_id_#t~mem256; [L3998] havoc virtblk_get_id_#t~ret258; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] CALL call virtblk_get_id_#t~ret259 := IS_ERR(virtblk_get_id_~req~1); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr := #in~ptr; [L4412] havoc ~tmp~24; VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=-1, ~ptr!offset=-27670116106269358115] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr := #in~ptr; [L4463] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4415] RET call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~ret401=1, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=-1, ~ptr!offset=-27670116106269358115] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3999] RET call virtblk_get_id_#t~ret259 := IS_ERR(virtblk_get_id_~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret259=1, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] assume -9223372036854775808 <= virtblk_get_id_#t~ret259 && virtblk_get_id_#t~ret259 <= 9223372036854775807; [L3999] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret259; [L3999] havoc virtblk_get_id_#t~ret259; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4000] COND TRUE 0 != virtblk_get_id_~tmp___2~1 [L4001] FCALL call bio_put(virtblk_get_id_~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] CALL call virtblk_get_id_#t~ret260 := PTR_ERR(virtblk_get_id_~req~1); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4401-L4409] ~ptr := #in~ptr; [L4403] havoc ~tmp~23; [L4406] ldv_ptr_err_#in~ptr := ~ptr; [L4406] havoc ldv_ptr_err_#res; [L4406] havoc ldv_ptr_err_~ptr; [L4474-L4481] ldv_ptr_err_~ptr := ldv_ptr_err_#in~ptr; [L4479] ldv_ptr_err_#res := (if (2012 - (ldv_ptr_err_~ptr!base + ldv_ptr_err_~ptr!offset)) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (2012 - (ldv_ptr_err_~ptr!base + ldv_ptr_err_~ptr!offset)) % 18446744073709551616 % 18446744073709551616 else (2012 - (ldv_ptr_err_~ptr!base + ldv_ptr_err_~ptr!offset)) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4406] #t~ret400 := ldv_ptr_err_#res; [L4406] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4406] ~tmp~23 := #t~ret400; [L4406] havoc #t~ret400; [L4407] #res := ~tmp~23; [L4002] RET call virtblk_get_id_#t~ret260 := PTR_ERR(virtblk_get_id_~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret260=9223372032559808512, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] assume -9223372036854775808 <= virtblk_get_id_#t~ret260 && virtblk_get_id_#t~ret260 <= 9223372036854775807; [L4002] virtblk_get_id_~tmp___1~5 := virtblk_get_id_#t~ret260; [L4002] havoc virtblk_get_id_#t~ret260; [L4003] virtblk_get_id_#res := (if virtblk_get_id_~tmp___1~5 % 4294967296 <= 2147483647 then virtblk_get_id_~tmp___1~5 % 4294967296 else virtblk_get_id_~tmp___1~5 % 4294967296 - 4294967296); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4031] virtblk_ioctl_#t~ret267 := virtblk_get_id_#res; [L4031] assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647; [L4031] virtblk_ioctl_~err~2 := virtblk_ioctl_#t~ret267; [L4031] havoc virtblk_ioctl_#t~ret267; [L4032] COND TRUE 0 == virtblk_ioctl_~err~2 [L4033] copy_to_user_#in~dst, copy_to_user_#in~src, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, 20; [L4033] havoc copy_to_user_#res; [L4033] havoc copy_to_user_#t~ret33, copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size, copy_to_user_~tmp~0; [L3215-L3224] copy_to_user_~dst := copy_to_user_#in~dst; [L3215-L3224] copy_to_user_~src := copy_to_user_#in~src; [L3215-L3224] copy_to_user_~size := copy_to_user_#in~size; [L3217] havoc copy_to_user_~tmp~0; [L3220] FCALL call might_fault(); [L3221] FCALL call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size); [L3221] copy_to_user_~tmp~0 := copy_to_user_#t~ret33; [L3221] havoc copy_to_user_#t~ret33; [L3222] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4033] virtblk_ioctl_#t~ret268 := copy_to_user_#res; [L4033] assume -2147483648 <= virtblk_ioctl_#t~ret268 && virtblk_ioctl_#t~ret268 <= 2147483647; [L4033] virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret268; [L4033] havoc virtblk_ioctl_#t~ret268; [L4034] COND FALSE !(0 != virtblk_ioctl_~tmp~16) [L4042] virtblk_ioctl_#res := virtblk_ioctl_~err~2; [L4019] FCALL call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0); [L4042] havoc virtblk_ioctl_~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4367] main_#t~ret396 := virtblk_ioctl_#res; [L4367] assume -2147483648 <= main_#t~ret396 && main_#t~ret396 <= 2147483647; [L4367] havoc main_#t~ret396; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647; [L4378] main_~tmp___1~8 := main_#t~nondet398; [L4378] havoc main_#t~nondet398; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379] COND FALSE !(0 != main_~tmp___1~8) [L4385] FCALL call ldv_handler_precall(); [L4329] FCALL call unregister_blkdev(~major~0, #t~string392); [L4330] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4556] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4559] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4447] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3328] FCALL call #t~string109 := #Ultimate.alloc(28); [L4146] FCALL call #t~string290 := #Ultimate.alloc(22); [L4150] FCALL call #t~string293 := #Ultimate.alloc(9); [L4184] FCALL call #t~string307 := #Ultimate.alloc(5); [L4184] FCALL call write~init~int(118, { base: #t~string307!base, offset: #t~string307!offset }, 1); [L4184] FCALL call write~init~int(100, { base: #t~string307!base, offset: 1 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(37, { base: #t~string307!base, offset: 2 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(99, { base: #t~string307!base, offset: 3 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(0, { base: #t~string307!base, offset: 4 + #t~string307!offset }, 1); [L4187] FCALL call #t~string310 := #Ultimate.alloc(7); [L4187] FCALL call write~init~int(118, { base: #t~string310!base, offset: #t~string310!offset }, 1); [L4187] FCALL call write~init~int(100, { base: #t~string310!base, offset: 1 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(37, { base: #t~string310!base, offset: 2 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(99, { base: #t~string310!base, offset: 3 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(37, { base: #t~string310!base, offset: 4 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(99, { base: #t~string310!base, offset: 5 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(0, { base: #t~string310!base, offset: 6 + #t~string310!offset }, 1); [L4192] FCALL call #t~string313 := #Ultimate.alloc(9); [L4307] FCALL call #t~string388 := #Ultimate.alloc(11); [L4314] FCALL call #t~string389 := #Ultimate.alloc(8); [L4329] FCALL call #t~string392 := #Ultimate.alloc(8); [L3729] ~major~0 := 0; [L3730] ~index~0 := 0; [L4303-L4306] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4303-L4306] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4339] ~LDV_IN_INTERRUPT~0 := 0; [L4510] ~ldv_blk_rq~0 := 0; [L4084-L4085] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4301-L4302] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4301-L4302] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4307-L4308] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4307-L4308] FCALL call write~init~$Pointer$(#t~string388, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4307-L4308] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4334] ~__mod_virtio_device_table~0!device := 0; [L4334] ~__mod_virtio_device_table~0!vendor := 0; [?] havoc main_#res; [?] havoc main_#t~ret393, main_#t~nondet394, main_#t~switch395, main_#t~ret396, main_#t~ret397, main_#t~nondet398, main_~var_group1~0, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0, main_~var_group2~0, main_~tmp~21, main_~tmp___0~13, main_~tmp___1~8; [L4342] havoc main_~var_group1~0; [L4343] havoc main_~var_virtblk_ioctl_5_p1~0; [L4344] havoc main_~var_virtblk_ioctl_5_p2~0; [L4345] havoc main_~var_virtblk_ioctl_5_p3~0; [L4346] havoc main_~var_group2~0; [L4347] havoc main_~tmp~21; [L4348] havoc main_~tmp___0~13; [L4349] havoc main_~tmp___1~8; [L4352] ~LDV_IN_INTERRUPT~0 := 1; [L4353] FCALL call ldv_initialize(); [L4354] FCALL call ldv_handler_precall(); [L4355] havoc init_#res; [L4355] havoc init_#t~ret390, init_#t~ret391, init_~tmp~20; [L4311] havoc init_~tmp~20; [L4314] FCALL call init_#t~ret390 := register_blkdev(0, #t~string389); [L4314] assume -2147483648 <= init_#t~ret390 && init_#t~ret390 <= 2147483647; [L4314] ~major~0 := init_#t~ret390; [L4314] havoc init_#t~ret390; [L4315] COND FALSE !(~major~0 < 0) [L4320] FCALL call init_#t~ret391 := register_virtio_driver(~#virtio_blk~0); [L4320] assume -2147483648 <= init_#t~ret391 && init_#t~ret391 <= 2147483647; [L4320] init_~tmp~20 := init_#t~ret391; [L4320] havoc init_#t~ret391; [L4321] init_#res := init_~tmp~20; [L4355] main_#t~ret393 := init_#res; [L4355] assume -2147483648 <= main_#t~ret393 && main_#t~ret393 <= 2147483647; [L4355] main_~tmp~21 := main_#t~ret393; [L4355] havoc main_#t~ret393; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4356] COND FALSE !(0 != main_~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp~21=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647; [L4378] main_~tmp___1~8 := main_#t~nondet398; [L4378] havoc main_#t~nondet398; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_~tmp___1~8=-1, main_~tmp~21=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379] COND TRUE 0 != main_~tmp___1~8 [L4363] assume -2147483648 <= main_#t~nondet394 && main_#t~nondet394 <= 2147483647; [L4363] main_~tmp___0~13 := main_#t~nondet394; [L4363] havoc main_#t~nondet394; [L4365] main_#t~switch395 := 0 == main_~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4364-L4375] COND TRUE main_#t~switch395 [L4366] FCALL call ldv_handler_precall(); [L4367] virtblk_ioctl_#in~bdev, virtblk_ioctl_#in~mode, virtblk_ioctl_#in~cmd, virtblk_ioctl_#in~data := main_~var_group1~0, main_~var_virtblk_ioctl_5_p1~0, main_~var_virtblk_ioctl_5_p2~0, main_~var_virtblk_ioctl_5_p3~0; [L4367] havoc virtblk_ioctl_#res; [L4367] havoc virtblk_ioctl_#t~mem265, virtblk_ioctl_#t~mem266, virtblk_ioctl_#t~ret267, virtblk_ioctl_#t~ret268, virtblk_ioctl_#t~mem269, virtblk_ioctl_#t~ret270, virtblk_ioctl_#t~mem271, virtblk_ioctl_#t~ret272, virtblk_ioctl_~bdev, virtblk_ioctl_~mode, virtblk_ioctl_~cmd, virtblk_ioctl_~data, virtblk_ioctl_~disk~0, virtblk_ioctl_~vblk~3, virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, virtblk_ioctl_~err~2, virtblk_ioctl_~tmp~16, virtblk_ioctl_~tmp___0~10, virtblk_ioctl_~tmp___1~6, virtblk_ioctl_~tmp___2~2; [L4013-L4060] virtblk_ioctl_~bdev := virtblk_ioctl_#in~bdev; [L4013-L4060] virtblk_ioctl_~mode := virtblk_ioctl_#in~mode; [L4013-L4060] virtblk_ioctl_~cmd := virtblk_ioctl_#in~cmd; [L4013-L4060] virtblk_ioctl_~data := virtblk_ioctl_#in~data; [L4016] havoc virtblk_ioctl_~disk~0; [L4017] havoc virtblk_ioctl_~vblk~3; [L4018] havoc virtblk_ioctl_~usr_data~0; [L4019] FCALL call virtblk_ioctl_~#id_str~0 := #Ultimate.alloc(20); [L4020] havoc virtblk_ioctl_~err~2; [L4021] havoc virtblk_ioctl_~tmp~16; [L4022] havoc virtblk_ioctl_~tmp___0~10; [L4023] havoc virtblk_ioctl_~tmp___1~6; [L4024] havoc virtblk_ioctl_~tmp___2~2; [L4027] FCALL call virtblk_ioctl_#t~mem265 := read~$Pointer$({ base: virtblk_ioctl_~bdev!base, offset: 240 + virtblk_ioctl_~bdev!offset }, 8); [L4027] virtblk_ioctl_~disk~0 := virtblk_ioctl_#t~mem265; [L4027] havoc virtblk_ioctl_#t~mem265; [L4028] FCALL call virtblk_ioctl_#t~mem266 := read~$Pointer$({ base: virtblk_ioctl_~disk~0!base, offset: 1075 + virtblk_ioctl_~disk~0!offset }, 8); [L4028] virtblk_ioctl_~vblk~3 := virtblk_ioctl_#t~mem266; [L4028] havoc virtblk_ioctl_#t~mem266; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4029] COND TRUE 1447184708 == virtblk_ioctl_~cmd % 4294967296 [L4030] virtblk_ioctl_~usr_data~0 := { base: 0, offset: (if virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 else virtblk_ioctl_~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L4031] virtblk_get_id_#in~disk, virtblk_get_id_#in~id_str := virtblk_ioctl_~disk~0, virtblk_ioctl_~#id_str~0; [L4031] havoc virtblk_get_id_#res; [L4031] havoc virtblk_get_id_#t~mem250, virtblk_get_id_#t~mem251, virtblk_get_id_#t~mem252, virtblk_get_id_#t~ret253, virtblk_get_id_#t~ret254, virtblk_get_id_#t~ret255, virtblk_get_id_#t~mem256, virtblk_get_id_#t~mem257, virtblk_get_id_#t~ret258, virtblk_get_id_#t~ret259, virtblk_get_id_#t~ret260, virtblk_get_id_#t~mem261, virtblk_get_id_#t~mem262, virtblk_get_id_#t~mem263, virtblk_get_id_#t~ret264, virtblk_get_id_~disk, virtblk_get_id_~id_str, virtblk_get_id_~vblk~2, virtblk_get_id_~req~1, virtblk_get_id_~bio~0, virtblk_get_id_~err~1, virtblk_get_id_~tmp~15, virtblk_get_id_~tmp___0~9, virtblk_get_id_~tmp___1~5, virtblk_get_id_~tmp___2~1; [L3977-L4012] virtblk_get_id_~disk := virtblk_get_id_#in~disk; [L3977-L4012] virtblk_get_id_~id_str := virtblk_get_id_#in~id_str; [L3979] havoc virtblk_get_id_~vblk~2; [L3980] havoc virtblk_get_id_~req~1; [L3981] havoc virtblk_get_id_~bio~0; [L3982] havoc virtblk_get_id_~err~1; [L3983] havoc virtblk_get_id_~tmp~15; [L3984] havoc virtblk_get_id_~tmp___0~9; [L3985] havoc virtblk_get_id_~tmp___1~5; [L3986] havoc virtblk_get_id_~tmp___2~1; [L3989] FCALL call virtblk_get_id_#t~mem250 := read~$Pointer$({ base: virtblk_get_id_~disk!base, offset: 1075 + virtblk_get_id_~disk!offset }, 8); [L3989] virtblk_get_id_~vblk~2 := virtblk_get_id_#t~mem250; [L3989] havoc virtblk_get_id_#t~mem250; [L3990] FCALL call virtblk_get_id_#t~mem251 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L3990] FCALL call virtblk_get_id_#t~mem252 := read~$Pointer$({ base: virtblk_get_id_#t~mem251!base, offset: 1067 + virtblk_get_id_#t~mem251!offset }, 8); [L3990] FCALL call virtblk_get_id_#t~ret253 := bio_map_kern(virtblk_get_id_#t~mem252, virtblk_get_id_~id_str, 20, 208); [L3990] virtblk_get_id_~bio~0 := virtblk_get_id_#t~ret253; [L3990] havoc virtblk_get_id_#t~mem252; [L3990] havoc virtblk_get_id_#t~ret253; [L3990] havoc virtblk_get_id_#t~mem251; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] CALL call virtblk_get_id_#t~ret254 := IS_ERR(virtblk_get_id_~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr := #in~ptr; [L4412] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr := #in~ptr; [L4463] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4415] RET call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret401=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3991] RET call virtblk_get_id_#t~ret254 := IS_ERR(virtblk_get_id_~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret254=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] assume -9223372036854775808 <= virtblk_get_id_#t~ret254 && virtblk_get_id_#t~ret254 <= 9223372036854775807; [L3991] virtblk_get_id_~tmp___0~9 := virtblk_get_id_#t~ret254; [L3991] havoc virtblk_get_id_#t~ret254; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3992] COND FALSE !(0 != virtblk_get_id_~tmp___0~9) [L3998] FCALL call virtblk_get_id_#t~mem256 := read~$Pointer$({ base: virtblk_get_id_~vblk~2!base, offset: 72 + virtblk_get_id_~vblk~2!offset }, 8); [L3998] FCALL call virtblk_get_id_#t~mem257 := read~$Pointer$({ base: virtblk_get_id_#t~mem256!base, offset: 1067 + virtblk_get_id_#t~mem256!offset }, 8); [L3998] ldv_blk_make_request_5_#in~ldv_func_arg1, ldv_blk_make_request_5_#in~ldv_func_arg2, ldv_blk_make_request_5_#in~ldv_func_arg3 := virtblk_get_id_#t~mem257, virtblk_get_id_~bio~0, 208; [L3998] havoc ldv_blk_make_request_5_#res; [L3998] havoc ldv_blk_make_request_5_#t~ret402, ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3, ldv_blk_make_request_5_~ldv_func_res~0, ldv_blk_make_request_5_~tmp~25; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg1 := ldv_blk_make_request_5_#in~ldv_func_arg1; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg2 := ldv_blk_make_request_5_#in~ldv_func_arg2; [L4419-L4431] ldv_blk_make_request_5_~ldv_func_arg3 := ldv_blk_make_request_5_#in~ldv_func_arg3; [L4422] havoc ldv_blk_make_request_5_~ldv_func_res~0; [L4423] havoc ldv_blk_make_request_5_~tmp~25; [L4426] FCALL call ldv_blk_make_request_5_#t~ret402 := blk_make_request(ldv_blk_make_request_5_~ldv_func_arg1, ldv_blk_make_request_5_~ldv_func_arg2, ldv_blk_make_request_5_~ldv_func_arg3); [L4426] ldv_blk_make_request_5_~tmp~25 := ldv_blk_make_request_5_#t~ret402; [L4426] havoc ldv_blk_make_request_5_#t~ret402; [L4427] ldv_blk_make_request_5_~ldv_func_res~0 := ldv_blk_make_request_5_~tmp~25; [L4428] ldv_get_blk_rq_#in~res, ldv_get_blk_rq_#in~mask := ldv_blk_make_request_5_~ldv_func_res~0, ldv_blk_make_request_5_~ldv_func_arg3; [L4428] havoc ldv_get_blk_rq_#t~ret405, ldv_get_blk_rq_~res, ldv_get_blk_rq_~mask, ldv_get_blk_rq_~tmp~28; [L4511-L4536] ldv_get_blk_rq_~res := ldv_get_blk_rq_#in~res; [L4511-L4536] ldv_get_blk_rq_~mask := ldv_get_blk_rq_#in~mask; [L4513] havoc ldv_get_blk_rq_~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem256!base=43, virtblk_get_id_#t~mem256!offset=3986, virtblk_get_id_#t~mem257!base=35, virtblk_get_id_#t~mem257!offset=39, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4516] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem256!base=43, virtblk_get_id_#t~mem256!offset=3986, virtblk_get_id_#t~mem257!base=35, virtblk_get_id_#t~mem257!offset=39, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4521] COND TRUE (16 == ldv_get_blk_rq_~mask % 4294967296 || 208 == ldv_get_blk_rq_~mask % 4294967296) || 16 == ldv_get_blk_rq_~mask % 4294967296 [L4522] ~ldv_blk_rq~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~mem256!base=43, virtblk_get_id_#t~mem256!offset=3986, virtblk_get_id_#t~mem257!base=35, virtblk_get_id_#t~mem257!offset=39, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4429] ldv_blk_make_request_5_#res := ldv_blk_make_request_5_~ldv_func_res~0; [L3998] virtblk_get_id_#t~ret258 := ldv_blk_make_request_5_#res; [L3998] virtblk_get_id_~req~1 := virtblk_get_id_#t~ret258; [L3998] havoc virtblk_get_id_#t~mem257; [L3998] havoc virtblk_get_id_#t~mem256; [L3998] havoc virtblk_get_id_#t~ret258; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] CALL call virtblk_get_id_#t~ret259 := IS_ERR(virtblk_get_id_~req~1); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr := #in~ptr; [L4412] havoc ~tmp~24; VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=-1, ~ptr!offset=-27670116106269358115] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr := #in~ptr; [L4463] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4415] RET call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~ret401=1, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=-1, ~ptr!offset=-27670116106269358115] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3999] RET call virtblk_get_id_#t~ret259 := IS_ERR(virtblk_get_id_~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret259=1, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] assume -9223372036854775808 <= virtblk_get_id_#t~ret259 && virtblk_get_id_#t~ret259 <= 9223372036854775807; [L3999] virtblk_get_id_~tmp___2~1 := virtblk_get_id_#t~ret259; [L3999] havoc virtblk_get_id_#t~ret259; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4000] COND TRUE 0 != virtblk_get_id_~tmp___2~1 [L4001] FCALL call bio_put(virtblk_get_id_~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] CALL call virtblk_get_id_#t~ret260 := PTR_ERR(virtblk_get_id_~req~1); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4401-L4409] ~ptr := #in~ptr; [L4403] havoc ~tmp~23; [L4406] ldv_ptr_err_#in~ptr := ~ptr; [L4406] havoc ldv_ptr_err_#res; [L4406] havoc ldv_ptr_err_~ptr; [L4474-L4481] ldv_ptr_err_~ptr := ldv_ptr_err_#in~ptr; [L4479] ldv_ptr_err_#res := (if (2012 - (ldv_ptr_err_~ptr!base + ldv_ptr_err_~ptr!offset)) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (2012 - (ldv_ptr_err_~ptr!base + ldv_ptr_err_~ptr!offset)) % 18446744073709551616 % 18446744073709551616 else (2012 - (ldv_ptr_err_~ptr!base + ldv_ptr_err_~ptr!offset)) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4406] #t~ret400 := ldv_ptr_err_#res; [L4406] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4406] ~tmp~23 := #t~ret400; [L4406] havoc #t~ret400; [L4407] #res := ~tmp~23; [L4002] RET call virtblk_get_id_#t~ret260 := PTR_ERR(virtblk_get_id_~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#t~ret260=9223372032559808512, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] assume -9223372036854775808 <= virtblk_get_id_#t~ret260 && virtblk_get_id_#t~ret260 <= 9223372036854775807; [L4002] virtblk_get_id_~tmp___1~5 := virtblk_get_id_#t~ret260; [L4002] havoc virtblk_get_id_#t~ret260; [L4003] virtblk_get_id_#res := (if virtblk_get_id_~tmp___1~5 % 4294967296 <= 2147483647 then virtblk_get_id_~tmp___1~5 % 4294967296 else virtblk_get_id_~tmp___1~5 % 4294967296 - 4294967296); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_~#id_str~0!base=30, virtblk_ioctl_~#id_str~0!offset=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~mode=77, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4031] virtblk_ioctl_#t~ret267 := virtblk_get_id_#res; [L4031] assume -2147483648 <= virtblk_ioctl_#t~ret267 && virtblk_ioctl_#t~ret267 <= 2147483647; [L4031] virtblk_ioctl_~err~2 := virtblk_ioctl_#t~ret267; [L4031] havoc virtblk_ioctl_#t~ret267; [L4032] COND TRUE 0 == virtblk_ioctl_~err~2 [L4033] copy_to_user_#in~dst, copy_to_user_#in~src, copy_to_user_#in~size := virtblk_ioctl_~usr_data~0, virtblk_ioctl_~#id_str~0, 20; [L4033] havoc copy_to_user_#res; [L4033] havoc copy_to_user_#t~ret33, copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size, copy_to_user_~tmp~0; [L3215-L3224] copy_to_user_~dst := copy_to_user_#in~dst; [L3215-L3224] copy_to_user_~src := copy_to_user_#in~src; [L3215-L3224] copy_to_user_~size := copy_to_user_#in~size; [L3217] havoc copy_to_user_~tmp~0; [L3220] FCALL call might_fault(); [L3221] FCALL call copy_to_user_#t~ret33 := _copy_to_user(copy_to_user_~dst, copy_to_user_~src, copy_to_user_~size); [L3221] copy_to_user_~tmp~0 := copy_to_user_#t~ret33; [L3221] havoc copy_to_user_#t~ret33; [L3222] copy_to_user_#res := (if copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 else copy_to_user_~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4033] virtblk_ioctl_#t~ret268 := copy_to_user_#res; [L4033] assume -2147483648 <= virtblk_ioctl_#t~ret268 && virtblk_ioctl_#t~ret268 <= 2147483647; [L4033] virtblk_ioctl_~tmp~16 := virtblk_ioctl_#t~ret268; [L4033] havoc virtblk_ioctl_#t~ret268; [L4034] COND FALSE !(0 != virtblk_ioctl_~tmp~16) [L4042] virtblk_ioctl_#res := virtblk_ioctl_~err~2; [L4019] FCALL call ULTIMATE.dealloc(virtblk_ioctl_~#id_str~0); [L4042] havoc virtblk_ioctl_~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4367] main_#t~ret396 := virtblk_ioctl_#res; [L4367] assume -2147483648 <= main_#t~ret396 && main_#t~ret396 <= 2147483647; [L4367] havoc main_#t~ret396; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=-1, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= main_#t~nondet398 && main_#t~nondet398 <= 2147483647; [L4378] main_~tmp___1~8 := main_#t~nondet398; [L4378] havoc main_#t~nondet398; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379] COND FALSE !(0 != main_~tmp___1~8) [L4385] FCALL call ldv_handler_precall(); [L4329] FCALL call unregister_blkdev(~major~0, #t~string392); [L4330] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4556] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, copy_to_user_#in~dst!base=0, copy_to_user_#in~dst!offset=0, copy_to_user_#in~size=20, copy_to_user_#in~src!base=30, copy_to_user_#in~src!offset=0, copy_to_user_#res=0, copy_to_user_#t~ret33=0, copy_to_user_~dst!base=0, copy_to_user_~dst!offset=0, copy_to_user_~size=20, copy_to_user_~src!base=30, copy_to_user_~src!offset=0, copy_to_user_~tmp~0=0, init_#res=0, init_#t~ret391=0, init_~tmp~20=0, ldv_blk_make_request_5_#in~ldv_func_arg1!base=35, ldv_blk_make_request_5_#in~ldv_func_arg1!offset=39, ldv_blk_make_request_5_#in~ldv_func_arg2!base=0, ldv_blk_make_request_5_#in~ldv_func_arg2!offset=0, ldv_blk_make_request_5_#in~ldv_func_arg3=208, ldv_blk_make_request_5_#res!base=-1, ldv_blk_make_request_5_#res!offset=-27670116106269358115, ldv_blk_make_request_5_~ldv_func_arg1!base=35, ldv_blk_make_request_5_~ldv_func_arg1!offset=39, ldv_blk_make_request_5_~ldv_func_arg2!base=0, ldv_blk_make_request_5_~ldv_func_arg2!offset=0, ldv_blk_make_request_5_~ldv_func_arg3=208, ldv_blk_make_request_5_~ldv_func_res~0!base=-1, ldv_blk_make_request_5_~ldv_func_res~0!offset=-27670116106269358115, ldv_blk_make_request_5_~tmp~25!base=-1, ldv_blk_make_request_5_~tmp~25!offset=-27670116106269358115, ldv_get_blk_rq_#in~mask=208, ldv_get_blk_rq_#in~res!base=-1, ldv_get_blk_rq_#in~res!offset=-27670116106269358115, ldv_get_blk_rq_~mask=208, ldv_get_blk_rq_~res!base=-1, ldv_get_blk_rq_~res!offset=-27670116106269358115, main_#t~switch395=true, main_~tmp___0~13=0, main_~tmp___1~8=0, main_~tmp~21=0, main_~var_group1~0!base=76, main_~var_group1~0!offset=0, main_~var_virtblk_ioctl_5_p1~0=77, main_~var_virtblk_ioctl_5_p2~0=1447184708, main_~var_virtblk_ioctl_5_p3~0=0, virtblk_get_id_#in~disk!base=47, virtblk_get_id_#in~disk!offset=1872, virtblk_get_id_#in~id_str!base=30, virtblk_get_id_#in~id_str!offset=0, virtblk_get_id_#res=0, virtblk_get_id_~bio~0!base=0, virtblk_get_id_~bio~0!offset=0, virtblk_get_id_~disk!base=47, virtblk_get_id_~disk!offset=1872, virtblk_get_id_~id_str!base=30, virtblk_get_id_~id_str!offset=0, virtblk_get_id_~req~1!base=-1, virtblk_get_id_~req~1!offset=-27670116106269358115, virtblk_get_id_~tmp___0~9=0, virtblk_get_id_~tmp___1~5=9223372032559808512, virtblk_get_id_~tmp___2~1=1, virtblk_get_id_~vblk~2!base=51, virtblk_get_id_~vblk~2!offset=6121, virtblk_ioctl_#in~bdev!base=76, virtblk_ioctl_#in~bdev!offset=0, virtblk_ioctl_#in~cmd=1447184708, virtblk_ioctl_#in~data=0, virtblk_ioctl_#in~mode=77, virtblk_ioctl_#res=0, virtblk_ioctl_#t~ret268=0, virtblk_ioctl_~bdev!base=76, virtblk_ioctl_~bdev!offset=0, virtblk_ioctl_~cmd=1447184708, virtblk_ioctl_~data=0, virtblk_ioctl_~disk~0!base=47, virtblk_ioctl_~disk~0!offset=1872, virtblk_ioctl_~err~2=0, virtblk_ioctl_~mode=77, virtblk_ioctl_~tmp~16=0, virtblk_ioctl_~usr_data~0!base=0, virtblk_ioctl_~usr_data~0!offset=0, virtblk_ioctl_~vblk~3!base=51, virtblk_ioctl_~vblk~3!offset=6121, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4559] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4447] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3328] FCALL call #t~string109 := #Ultimate.alloc(28); [L4146] FCALL call #t~string290 := #Ultimate.alloc(22); [L4150] FCALL call #t~string293 := #Ultimate.alloc(9); [L4184] FCALL call #t~string307 := #Ultimate.alloc(5); [L4184] FCALL call write~init~int(118, { base: #t~string307!base, offset: #t~string307!offset }, 1); [L4184] FCALL call write~init~int(100, { base: #t~string307!base, offset: 1 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(37, { base: #t~string307!base, offset: 2 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(99, { base: #t~string307!base, offset: 3 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(0, { base: #t~string307!base, offset: 4 + #t~string307!offset }, 1); [L4187] FCALL call #t~string310 := #Ultimate.alloc(7); [L4187] FCALL call write~init~int(118, { base: #t~string310!base, offset: #t~string310!offset }, 1); [L4187] FCALL call write~init~int(100, { base: #t~string310!base, offset: 1 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(37, { base: #t~string310!base, offset: 2 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(99, { base: #t~string310!base, offset: 3 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(37, { base: #t~string310!base, offset: 4 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(99, { base: #t~string310!base, offset: 5 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(0, { base: #t~string310!base, offset: 6 + #t~string310!offset }, 1); [L4192] FCALL call #t~string313 := #Ultimate.alloc(9); [L4307] FCALL call #t~string388 := #Ultimate.alloc(11); [L4314] FCALL call #t~string389 := #Ultimate.alloc(8); [L4329] FCALL call #t~string392 := #Ultimate.alloc(8); [L3729] ~major~0 := 0; [L3730] ~index~0 := 0; [L4303-L4306] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4303-L4306] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4339] ~LDV_IN_INTERRUPT~0 := 0; [L4510] ~ldv_blk_rq~0 := 0; [L4084-L4085] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4301-L4302] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4301-L4302] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4307-L4308] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4307-L4308] FCALL call write~init~$Pointer$(#t~string388, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4307-L4308] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4334] ~__mod_virtio_device_table~0!device := 0; [L4334] ~__mod_virtio_device_table~0!vendor := 0; [L4342] havoc ~var_group1~0; [L4343] havoc ~var_virtblk_ioctl_5_p1~0; [L4344] havoc ~var_virtblk_ioctl_5_p2~0; [L4345] havoc ~var_virtblk_ioctl_5_p3~0; [L4346] havoc ~var_group2~0; [L4347] havoc ~tmp~21; [L4348] havoc ~tmp___0~13; [L4349] havoc ~tmp___1~8; [L4352] ~LDV_IN_INTERRUPT~0 := 1; [L4353] FCALL call ldv_initialize(); [L4354] FCALL call ldv_handler_precall(); [L4311] havoc ~tmp~20; [L4314] FCALL call #t~ret390 := register_blkdev(0, #t~string389); [L4314] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4314] ~major~0 := #t~ret390; [L4314] havoc #t~ret390; [L4315] COND FALSE !(~major~0 < 0) [L4320] FCALL call #t~ret391 := register_virtio_driver(~#virtio_blk~0); [L4320] assume -2147483648 <= #t~ret391 && #t~ret391 <= 2147483647; [L4320] ~tmp~20 := #t~ret391; [L4320] havoc #t~ret391; [L4321] #res := ~tmp~20; [L4355] assume -2147483648 <= #t~ret393 && #t~ret393 <= 2147483647; [L4355] ~tmp~21 := #t~ret393; [L4355] havoc #t~ret393; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4356] COND FALSE !(0 != ~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= #t~nondet398 && #t~nondet398 <= 2147483647; [L4378] ~tmp___1~8 := #t~nondet398; [L4378] havoc #t~nondet398; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379] COND TRUE 0 != ~tmp___1~8 [L4363] assume -2147483648 <= #t~nondet394 && #t~nondet394 <= 2147483647; [L4363] ~tmp___0~13 := #t~nondet394; [L4363] havoc #t~nondet394; [L4365] #t~switch395 := 0 == ~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4364-L4375] COND TRUE #t~switch395 [L4366] FCALL call ldv_handler_precall(); [L4013-L4060] ~bdev := #in~bdev; [L4013-L4060] ~mode := #in~mode; [L4013-L4060] ~cmd := #in~cmd; [L4013-L4060] ~data := #in~data; [L4016] havoc ~disk~0; [L4017] havoc ~vblk~3; [L4018] havoc ~usr_data~0; [L4019] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4020] havoc ~err~2; [L4021] havoc ~tmp~16; [L4022] havoc ~tmp___0~10; [L4023] havoc ~tmp___1~6; [L4024] havoc ~tmp___2~2; [L4027] FCALL call #t~mem265 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4027] ~disk~0 := #t~mem265; [L4027] havoc #t~mem265; [L4028] FCALL call #t~mem266 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4028] ~vblk~3 := #t~mem266; [L4028] havoc #t~mem266; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4029] COND TRUE 1447184708 == ~cmd % 4294967296 [L4030] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L3977-L4012] ~disk := #in~disk; [L3977-L4012] ~id_str := #in~id_str; [L3979] havoc ~vblk~2; [L3980] havoc ~req~1; [L3981] havoc ~bio~0; [L3982] havoc ~err~1; [L3983] havoc ~tmp~15; [L3984] havoc ~tmp___0~9; [L3985] havoc ~tmp___1~5; [L3986] havoc ~tmp___2~1; [L3989] FCALL call #t~mem250 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L3989] ~vblk~2 := #t~mem250; [L3989] havoc #t~mem250; [L3990] FCALL call #t~mem251 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3990] FCALL call #t~mem252 := read~$Pointer$({ base: #t~mem251!base, offset: 1067 + #t~mem251!offset }, 8); [L3990] FCALL call #t~ret253 := bio_map_kern(#t~mem252, ~id_str, 20, 208); [L3990] ~bio~0 := #t~ret253; [L3990] havoc #t~mem252; [L3990] havoc #t~ret253; [L3990] havoc #t~mem251; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] CALL call #t~ret254 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr := #in~ptr; [L4412] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr := #in~ptr; [L4463] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4415] RET call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret401=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3991] RET call #t~ret254 := IS_ERR(~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] assume -9223372036854775808 <= #t~ret254 && #t~ret254 <= 9223372036854775807; [L3991] ~tmp___0~9 := #t~ret254; [L3991] havoc #t~ret254; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3992] COND FALSE !(0 != ~tmp___0~9) [L3998] FCALL call #t~mem256 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3998] FCALL call #t~mem257 := read~$Pointer$({ base: #t~mem256!base, offset: 1067 + #t~mem256!offset }, 8); [L4419-L4431] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4419-L4431] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4419-L4431] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4422] havoc ~ldv_func_res~0; [L4423] havoc ~tmp~25; [L4426] FCALL call #t~ret402 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4426] ~tmp~25 := #t~ret402; [L4426] havoc #t~ret402; [L4427] ~ldv_func_res~0 := ~tmp~25; [L4511-L4536] ~res := #in~res; [L4511-L4536] ~mask := #in~mask; [L4513] havoc ~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4516] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4521] COND TRUE (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296 [L4522] ~ldv_blk_rq~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4429] #res := ~ldv_func_res~0; [L3998] ~req~1 := #t~ret258; [L3998] havoc #t~mem257; [L3998] havoc #t~mem256; [L3998] havoc #t~ret258; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] CALL call #t~ret259 := IS_ERR(~req~1); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr := #in~ptr; [L4412] havoc ~tmp~24; VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=-1, ~ptr!offset=-27670116106269358115] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr := #in~ptr; [L4463] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4415] RET call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~ret401=1, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=-1, ~ptr!offset=-27670116106269358115] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3999] RET call #t~ret259 := IS_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] assume -9223372036854775808 <= #t~ret259 && #t~ret259 <= 9223372036854775807; [L3999] ~tmp___2~1 := #t~ret259; [L3999] havoc #t~ret259; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4000] COND TRUE 0 != ~tmp___2~1 [L4001] FCALL call bio_put(~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] CALL call #t~ret260 := PTR_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4401-L4409] ~ptr := #in~ptr; [L4403] havoc ~tmp~23; [L4474-L4481] ~ptr := #in~ptr; [L4479] #res := (if (2012 - (~ptr!base + ~ptr!offset)) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (2012 - (~ptr!base + ~ptr!offset)) % 18446744073709551616 % 18446744073709551616 else (2012 - (~ptr!base + ~ptr!offset)) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4406] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4406] ~tmp~23 := #t~ret400; [L4406] havoc #t~ret400; [L4407] #res := ~tmp~23; [L4002] RET call #t~ret260 := PTR_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] assume -9223372036854775808 <= #t~ret260 && #t~ret260 <= 9223372036854775807; [L4002] ~tmp___1~5 := #t~ret260; [L4002] havoc #t~ret260; [L4003] #res := (if ~tmp___1~5 % 4294967296 <= 2147483647 then ~tmp___1~5 % 4294967296 else ~tmp___1~5 % 4294967296 - 4294967296); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4031] assume -2147483648 <= #t~ret267 && #t~ret267 <= 2147483647; [L4031] ~err~2 := #t~ret267; [L4031] havoc #t~ret267; [L4032] COND TRUE 0 == ~err~2 [L3215-L3224] ~dst := #in~dst; [L3215-L3224] ~src := #in~src; [L3215-L3224] ~size := #in~size; [L3217] havoc ~tmp~0; [L3220] FCALL call might_fault(); [L3221] FCALL call #t~ret33 := _copy_to_user(~dst, ~src, ~size); [L3221] ~tmp~0 := #t~ret33; [L3221] havoc #t~ret33; [L3222] #res := (if ~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then ~tmp~0 % 18446744073709551616 % 4294967296 else ~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4033] assume -2147483648 <= #t~ret268 && #t~ret268 <= 2147483647; [L4033] ~tmp~16 := #t~ret268; [L4033] havoc #t~ret268; [L4034] COND FALSE !(0 != ~tmp~16) [L4042] #res := ~err~2; [L4019] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4042] havoc ~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4367] assume -2147483648 <= #t~ret396 && #t~ret396 <= 2147483647; [L4367] havoc #t~ret396; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= #t~nondet398 && #t~nondet398 <= 2147483647; [L4378] ~tmp___1~8 := #t~nondet398; [L4378] havoc #t~nondet398; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379] COND FALSE !(0 != ~tmp___1~8) [L4385] FCALL call ldv_handler_precall(); [L4329] FCALL call unregister_blkdev(~major~0, #t~string392); [L4330] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4556] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4559] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4447] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] ----- [2018-11-23 06:30:45,851 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,852 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,853 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,853 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,854 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,854 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,855 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,855 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,855 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,856 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,856 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,856 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,857 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,857 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,858 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,858 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,858 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,858 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,859 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,859 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,860 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,860 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,860 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,861 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,861 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,861 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,862 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,862 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,863 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,863 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,863 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,863 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,864 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,864 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,865 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,865 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,865 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,865 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,866 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,866 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device [2018-11-23 06:30:45,867 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!vendor [2018-11-23 06:30:45,867 WARN L1272 BoogieBacktranslator]: unknown boogie variable ~__mod_virtio_device_table~0!device ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L3328] FCALL call #t~string109 := #Ultimate.alloc(28); [L4146] FCALL call #t~string290 := #Ultimate.alloc(22); [L4150] FCALL call #t~string293 := #Ultimate.alloc(9); [L4184] FCALL call #t~string307 := #Ultimate.alloc(5); [L4184] FCALL call write~init~int(118, { base: #t~string307!base, offset: #t~string307!offset }, 1); [L4184] FCALL call write~init~int(100, { base: #t~string307!base, offset: 1 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(37, { base: #t~string307!base, offset: 2 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(99, { base: #t~string307!base, offset: 3 + #t~string307!offset }, 1); [L4184] FCALL call write~init~int(0, { base: #t~string307!base, offset: 4 + #t~string307!offset }, 1); [L4187] FCALL call #t~string310 := #Ultimate.alloc(7); [L4187] FCALL call write~init~int(118, { base: #t~string310!base, offset: #t~string310!offset }, 1); [L4187] FCALL call write~init~int(100, { base: #t~string310!base, offset: 1 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(37, { base: #t~string310!base, offset: 2 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(99, { base: #t~string310!base, offset: 3 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(37, { base: #t~string310!base, offset: 4 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(99, { base: #t~string310!base, offset: 5 + #t~string310!offset }, 1); [L4187] FCALL call write~init~int(0, { base: #t~string310!base, offset: 6 + #t~string310!offset }, 1); [L4192] FCALL call #t~string313 := #Ultimate.alloc(9); [L4307] FCALL call #t~string388 := #Ultimate.alloc(11); [L4314] FCALL call #t~string389 := #Ultimate.alloc(8); [L4329] FCALL call #t~string392 := #Ultimate.alloc(8); [L3729] ~major~0 := 0; [L3730] ~index~0 := 0; [L4303-L4306] FCALL call ~#features~0 := #Ultimate.alloc(36); [L4303-L4306] FCALL call write~init~int(0, { base: ~#features~0!base, offset: ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(2, { base: ~#features~0!base, offset: 4 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(1, { base: ~#features~0!base, offset: 8 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(4, { base: ~#features~0!base, offset: 12 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(5, { base: ~#features~0!base, offset: 16 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(6, { base: ~#features~0!base, offset: 20 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(7, { base: ~#features~0!base, offset: 24 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(9, { base: ~#features~0!base, offset: 28 + ~#features~0!offset }, 4); [L4303-L4306] FCALL call write~init~int(10, { base: ~#features~0!base, offset: 32 + ~#features~0!offset }, 4); [L4339] ~LDV_IN_INTERRUPT~0 := 0; [L4510] ~ldv_blk_rq~0 := 0; [L4084-L4085] FCALL call ~#virtblk_fops~0 := #Ultimate.alloc(96); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 8 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(#funAddr~virtblk_ioctl, { base: ~#virtblk_fops~0!base, offset: 16 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 24 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 32 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 40 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 48 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 56 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 64 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(#funAddr~virtblk_getgeo, { base: ~#virtblk_fops~0!base, offset: 72 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtblk_fops~0!base, offset: 80 + ~#virtblk_fops~0!offset }, 8); [L4084-L4085] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtblk_fops~0!base, offset: 88 + ~#virtblk_fops~0!offset }, 8); [L4301-L4302] FCALL call ~#id_table~0 := #Ultimate.alloc(16); [L4301-L4302] FCALL call write~init~int(2, { base: ~#id_table~0!base, offset: ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(4294967295, { base: ~#id_table~0!base, offset: 4 + ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 8 + ~#id_table~0!offset }, 4); [L4301-L4302] FCALL call write~init~int(0, { base: ~#id_table~0!base, offset: 12 + ~#id_table~0!offset }, 4); [L4307-L4308] FCALL call ~#virtio_blk~0 := #Ultimate.alloc(141); [L4307-L4308] FCALL call write~init~$Pointer$(#t~string388, { base: ~#virtio_blk~0!base, offset: ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 8 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#virtio_blk~0!base, offset: 16 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 24 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~int(0, { base: ~#virtio_blk~0!base, offset: 32 + ~#virtio_blk~0!offset }, 1); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 33 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 41 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 49 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 57 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 65 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 73 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 81 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 89 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#id_table~0, { base: ~#virtio_blk~0!base, offset: 97 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(~#features~0, { base: ~#virtio_blk~0!base, offset: 105 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~int(9, { base: ~#virtio_blk~0!base, offset: 113 + ~#virtio_blk~0!offset }, 4); [L4307-L4308] FCALL call write~init~$Pointer$(#funAddr~virtblk_probe, { base: ~#virtio_blk~0!base, offset: 117 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$(#funAddr~virtblk_remove, { base: ~#virtio_blk~0!base, offset: 125 + ~#virtio_blk~0!offset }, 8); [L4307-L4308] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#virtio_blk~0!base, offset: 133 + ~#virtio_blk~0!offset }, 8); [L4334] ~__mod_virtio_device_table~0!device := 0; [L4334] ~__mod_virtio_device_table~0!vendor := 0; [L4342] havoc ~var_group1~0; [L4343] havoc ~var_virtblk_ioctl_5_p1~0; [L4344] havoc ~var_virtblk_ioctl_5_p2~0; [L4345] havoc ~var_virtblk_ioctl_5_p3~0; [L4346] havoc ~var_group2~0; [L4347] havoc ~tmp~21; [L4348] havoc ~tmp___0~13; [L4349] havoc ~tmp___1~8; [L4352] ~LDV_IN_INTERRUPT~0 := 1; [L4353] FCALL call ldv_initialize(); [L4354] FCALL call ldv_handler_precall(); [L4311] havoc ~tmp~20; [L4314] FCALL call #t~ret390 := register_blkdev(0, #t~string389); [L4314] assume -2147483648 <= #t~ret390 && #t~ret390 <= 2147483647; [L4314] ~major~0 := #t~ret390; [L4314] havoc #t~ret390; [L4315] COND FALSE !(~major~0 < 0) [L4320] FCALL call #t~ret391 := register_virtio_driver(~#virtio_blk~0); [L4320] assume -2147483648 <= #t~ret391 && #t~ret391 <= 2147483647; [L4320] ~tmp~20 := #t~ret391; [L4320] havoc #t~ret391; [L4321] #res := ~tmp~20; [L4355] assume -2147483648 <= #t~ret393 && #t~ret393 <= 2147483647; [L4355] ~tmp~21 := #t~ret393; [L4355] havoc #t~ret393; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4356] COND FALSE !(0 != ~tmp~21) VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= #t~nondet398 && #t~nondet398 <= 2147483647; [L4378] ~tmp___1~8 := #t~nondet398; [L4378] havoc #t~nondet398; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379] COND TRUE 0 != ~tmp___1~8 [L4363] assume -2147483648 <= #t~nondet394 && #t~nondet394 <= 2147483647; [L4363] ~tmp___0~13 := #t~nondet394; [L4363] havoc #t~nondet394; [L4365] #t~switch395 := 0 == ~tmp___0~13; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4364-L4375] COND TRUE #t~switch395 [L4366] FCALL call ldv_handler_precall(); [L4013-L4060] ~bdev := #in~bdev; [L4013-L4060] ~mode := #in~mode; [L4013-L4060] ~cmd := #in~cmd; [L4013-L4060] ~data := #in~data; [L4016] havoc ~disk~0; [L4017] havoc ~vblk~3; [L4018] havoc ~usr_data~0; [L4019] FCALL call ~#id_str~0 := #Ultimate.alloc(20); [L4020] havoc ~err~2; [L4021] havoc ~tmp~16; [L4022] havoc ~tmp___0~10; [L4023] havoc ~tmp___1~6; [L4024] havoc ~tmp___2~2; [L4027] FCALL call #t~mem265 := read~$Pointer$({ base: ~bdev!base, offset: 240 + ~bdev!offset }, 8); [L4027] ~disk~0 := #t~mem265; [L4027] havoc #t~mem265; [L4028] FCALL call #t~mem266 := read~$Pointer$({ base: ~disk~0!base, offset: 1075 + ~disk~0!offset }, 8); [L4028] ~vblk~3 := #t~mem266; [L4028] havoc #t~mem266; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4029] COND TRUE 1447184708 == ~cmd % 4294967296 [L4030] ~usr_data~0 := { base: 0, offset: (if ~data % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~data % 18446744073709551616 % 18446744073709551616 else ~data % 18446744073709551616 % 18446744073709551616 - 18446744073709551616) }; [L3977-L4012] ~disk := #in~disk; [L3977-L4012] ~id_str := #in~id_str; [L3979] havoc ~vblk~2; [L3980] havoc ~req~1; [L3981] havoc ~bio~0; [L3982] havoc ~err~1; [L3983] havoc ~tmp~15; [L3984] havoc ~tmp___0~9; [L3985] havoc ~tmp___1~5; [L3986] havoc ~tmp___2~1; [L3989] FCALL call #t~mem250 := read~$Pointer$({ base: ~disk!base, offset: 1075 + ~disk!offset }, 8); [L3989] ~vblk~2 := #t~mem250; [L3989] havoc #t~mem250; [L3990] FCALL call #t~mem251 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3990] FCALL call #t~mem252 := read~$Pointer$({ base: #t~mem251!base, offset: 1067 + #t~mem251!offset }, 8); [L3990] FCALL call #t~ret253 := bio_map_kern(#t~mem252, ~id_str, 20, 208); [L3990] ~bio~0 := #t~ret253; [L3990] havoc #t~mem252; [L3990] havoc #t~ret253; [L3990] havoc #t~mem251; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] CALL call #t~ret254 := IS_ERR(~bio~0); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr := #in~ptr; [L4412] havoc ~tmp~24; VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr := #in~ptr; [L4463] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4415] RET call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~ret401=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=0, ~ptr!offset=0] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3991] RET call #t~ret254 := IS_ERR(~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3991] assume -9223372036854775808 <= #t~ret254 && #t~ret254 <= 9223372036854775807; [L3991] ~tmp___0~9 := #t~ret254; [L3991] havoc #t~ret254; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3992] COND FALSE !(0 != ~tmp___0~9) [L3998] FCALL call #t~mem256 := read~$Pointer$({ base: ~vblk~2!base, offset: 72 + ~vblk~2!offset }, 8); [L3998] FCALL call #t~mem257 := read~$Pointer$({ base: #t~mem256!base, offset: 1067 + #t~mem256!offset }, 8); [L4419-L4431] ~ldv_func_arg1 := #in~ldv_func_arg1; [L4419-L4431] ~ldv_func_arg2 := #in~ldv_func_arg2; [L4419-L4431] ~ldv_func_arg3 := #in~ldv_func_arg3; [L4422] havoc ~ldv_func_res~0; [L4423] havoc ~tmp~25; [L4426] FCALL call #t~ret402 := blk_make_request(~ldv_func_arg1, ~ldv_func_arg2, ~ldv_func_arg3); [L4426] ~tmp~25 := #t~ret402; [L4426] havoc #t~ret402; [L4427] ~ldv_func_res~0 := ~tmp~25; [L4511-L4536] ~res := #in~res; [L4511-L4536] ~mask := #in~mask; [L4513] havoc ~tmp~28; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4516] COND TRUE 0 == ~ldv_blk_rq~0 VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=0, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4521] COND TRUE (16 == ~mask % 4294967296 || 208 == ~mask % 4294967296) || 16 == ~mask % 4294967296 [L4522] ~ldv_blk_rq~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4429] #res := ~ldv_func_res~0; [L3998] ~req~1 := #t~ret258; [L3998] havoc #t~mem257; [L3998] havoc #t~mem256; [L3998] havoc #t~ret258; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] CALL call #t~ret259 := IS_ERR(~req~1); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4410-L4418] ~ptr := #in~ptr; [L4412] havoc ~tmp~24; VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=-1, ~ptr!offset=-27670116106269358115] [L4415] CALL call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4458-L4465] ~ptr := #in~ptr; [L4463] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L4415] RET call #t~ret401 := ldv_is_err(~ptr); VAL [#in~ptr!base=-1, #in~ptr!offset=-27670116106269358115, #NULL!base=0, #NULL!offset=0, #t~ret401=1, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0, ~ptr!base=-1, ~ptr!offset=-27670116106269358115] [L4415] assume -9223372036854775808 <= #t~ret401 && #t~ret401 <= 9223372036854775807; [L4415] ~tmp~24 := #t~ret401; [L4415] havoc #t~ret401; [L4416] #res := ~tmp~24; [L3999] RET call #t~ret259 := IS_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3999] assume -9223372036854775808 <= #t~ret259 && #t~ret259 <= 9223372036854775807; [L3999] ~tmp___2~1 := #t~ret259; [L3999] havoc #t~ret259; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4000] COND TRUE 0 != ~tmp___2~1 [L4001] FCALL call bio_put(~bio~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] CALL call #t~ret260 := PTR_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4401-L4409] ~ptr := #in~ptr; [L4403] havoc ~tmp~23; [L4474-L4481] ~ptr := #in~ptr; [L4479] #res := (if (2012 - (~ptr!base + ~ptr!offset)) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (2012 - (~ptr!base + ~ptr!offset)) % 18446744073709551616 % 18446744073709551616 else (2012 - (~ptr!base + ~ptr!offset)) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [L4406] assume -9223372036854775808 <= #t~ret400 && #t~ret400 <= 9223372036854775807; [L4406] ~tmp~23 := #t~ret400; [L4406] havoc #t~ret400; [L4407] #res := ~tmp~23; [L4002] RET call #t~ret260 := PTR_ERR(~req~1); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4002] assume -9223372036854775808 <= #t~ret260 && #t~ret260 <= 9223372036854775807; [L4002] ~tmp___1~5 := #t~ret260; [L4002] havoc #t~ret260; [L4003] #res := (if ~tmp___1~5 % 4294967296 <= 2147483647 then ~tmp___1~5 % 4294967296 else ~tmp___1~5 % 4294967296 - 4294967296); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4031] assume -2147483648 <= #t~ret267 && #t~ret267 <= 2147483647; [L4031] ~err~2 := #t~ret267; [L4031] havoc #t~ret267; [L4032] COND TRUE 0 == ~err~2 [L3215-L3224] ~dst := #in~dst; [L3215-L3224] ~src := #in~src; [L3215-L3224] ~size := #in~size; [L3217] havoc ~tmp~0; [L3220] FCALL call might_fault(); [L3221] FCALL call #t~ret33 := _copy_to_user(~dst, ~src, ~size); [L3221] ~tmp~0 := #t~ret33; [L3221] havoc #t~ret33; [L3222] #res := (if ~tmp~0 % 18446744073709551616 % 4294967296 <= 2147483647 then ~tmp~0 % 18446744073709551616 % 4294967296 else ~tmp~0 % 18446744073709551616 % 4294967296 - 4294967296); [L4033] assume -2147483648 <= #t~ret268 && #t~ret268 <= 2147483647; [L4033] ~tmp~16 := #t~ret268; [L4033] havoc #t~ret268; [L4034] COND FALSE !(0 != ~tmp~16) [L4042] #res := ~err~2; [L4019] FCALL call ULTIMATE.dealloc(~#id_str~0); [L4042] havoc ~#id_str~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4367] assume -2147483648 <= #t~ret396 && #t~ret396 <= 2147483647; [L4367] havoc #t~ret396; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4378] assume -2147483648 <= #t~nondet398 && #t~nondet398 <= 2147483647; [L4378] ~tmp___1~8 := #t~nondet398; [L4378] havoc #t~nondet398; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4379] COND FALSE !(0 != ~tmp___1~8) [L4385] FCALL call ldv_handler_precall(); [L4329] FCALL call unregister_blkdev(~major~0, #t~string392); [L4330] FCALL call unregister_virtio_driver(~#virtio_blk~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4556] COND FALSE !(0 == ~ldv_blk_rq~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4559] CALL call ldv_error(); VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L4447] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string109!base=29, #t~string109!offset=0, #t~string290!base=19, #t~string290!offset=0, #t~string293!base=27, #t~string293!offset=0, #t~string307!base=13, #t~string307!offset=0, #t~string310!base=23, #t~string310!offset=0, #t~string313!base=14, #t~string313!offset=0, #t~string388!base=26, #t~string388!offset=0, #t~string389!base=17, #t~string389!offset=0, #t~string392!base=21, #t~string392!offset=0, ~#__this_module~0!base=62, ~#__this_module~0!offset=67, ~#features~0!base=25, ~#features~0!offset=0, ~#id_table~0!base=31, ~#id_table~0!offset=0, ~#virtblk_fops~0!base=18, ~#virtblk_fops~0!offset=0, ~#virtio_blk~0!base=15, ~#virtio_blk~0!offset=0, ~__mod_virtio_device_table~0!device=0, ~__mod_virtio_device_table~0!vendor=0, ~index~0=0, ~ldv_blk_rq~0=1, ~LDV_IN_INTERRUPT~0=1, ~major~0=0] [L3729] static int major ; [L3730] static int index ; [L4303-L4306] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4339] int LDV_IN_INTERRUPT ; [L4510] int ldv_blk_rq = 0; [L4084-L4085] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4301-L4302] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4307-L4308] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4334] struct virtio_device_id const __mod_virtio_device_table ; [L4342] struct block_device *var_group1 ; [L4343] fmode_t var_virtblk_ioctl_5_p1 ; [L4344] unsigned int var_virtblk_ioctl_5_p2 ; [L4345] unsigned long var_virtblk_ioctl_5_p3 ; [L4346] struct hd_geometry *var_group2 ; [L4347] int tmp ; [L4348] int tmp___0 ; [L4349] int tmp___1 ; [L4352] LDV_IN_INTERRUPT = 1 [L4311] int tmp ; [L4314] major = register_blkdev(0U, "virtblk") [L4315] COND FALSE !(major < 0) [L4320] tmp = register_virtio_driver(& virtio_blk) [L4321] return (tmp); [L4355] tmp = init() [L4356] COND FALSE !(tmp != 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4378] tmp___1 = __VERIFIER_nondet_int() [L4379] COND TRUE tmp___1 != 0 [L4363] tmp___0 = __VERIFIER_nondet_int() [L4365] case 0: [L4016] struct gendisk *disk ; [L4017] struct virtio_blk *vblk ; [L4018] void *usr_data ; [L4019] char id_str[20U] ; [L4020] int err ; [L4021] int tmp ; [L4022] bool tmp___0 ; [L4023] int tmp___1 ; [L4024] int tmp___2 ; [L4027] EXPR bdev->bd_disk [L4027] disk = bdev->bd_disk [L4028] EXPR disk->private_data [L4028] vblk = (struct virtio_blk *)disk->private_data [L4029] COND TRUE cmd == 1447184708U [L4030] usr_data = (void *)data [L3979] struct virtio_blk *vblk ; [L3980] struct request *req ; [L3981] struct bio *bio ; [L3982] int err ; [L3983] long tmp ; [L3984] long tmp___0 ; [L3985] long tmp___1 ; [L3986] long tmp___2 ; [L3989] EXPR disk->private_data [L3989] vblk = (struct virtio_blk *)disk->private_data [L3990] EXPR vblk->disk [L3990] EXPR (vblk->disk)->queue [L3990] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L3991] CALL, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4412] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4415] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4463] return ((unsigned long )ptr > 2012UL); [L4415] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4415] tmp = ldv_is_err(ptr) [L4416] return (tmp); [L3991] RET, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L3991] tmp___0 = IS_ERR((void const *)bio) [L3992] COND FALSE !(tmp___0 != 0L) [L3998] EXPR vblk->disk [L3998] EXPR (vblk->disk)->queue [L4422] ldv_func_ret_type___3 ldv_func_res ; [L4423] struct request *tmp ; [L4426] tmp = blk_make_request(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L4427] ldv_func_res = tmp [L4513] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4516] COND TRUE ldv_blk_rq == 0 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4521] COND TRUE (mask == 16U || mask == 208U) || mask == 16U [L4522] ldv_blk_rq = 1 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4429] return (ldv_func_res); [L3998] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L3999] CALL, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={-1:-27670116106269358115}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4412] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={-1:-27670116106269358115}, ptr={-1:-27670116106269358115}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4415] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={-1:-27670116106269358115}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4463] return ((unsigned long )ptr > 2012UL); [L4415] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=1, major=0, ptr={-1:-27670116106269358115}, ptr={-1:-27670116106269358115}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4415] tmp = ldv_is_err(ptr) [L4416] return (tmp); [L3999] RET, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L3999] tmp___2 = IS_ERR((void const *)req) [L4000] COND TRUE tmp___2 != 0L [L4002] CALL, EXPR PTR_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4403] long tmp ; [L4479] return ((long )(2012UL - (unsigned long )ptr)); [L4406] tmp = ldv_ptr_err(ptr) [L4407] return (tmp); [L4002] RET, EXPR PTR_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4002] tmp___1 = PTR_ERR((void const *)req) [L4003] return ((int )tmp___1); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4031] err = virtblk_get_id(disk, (char *)(& id_str)) [L4032] COND TRUE err == 0 [L3217] unsigned long tmp ; [L3221] tmp = _copy_to_user(dst, src, size) [L3222] return ((int )tmp); [L4033] tmp = copy_to_user(usr_data, (void const *)(& id_str), 20U) [L4034] COND FALSE !(tmp != 0) [L4042] return (err); [L4042] return (err); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4378] tmp___1 = __VERIFIER_nondet_int() [L4379] COND FALSE !(tmp___1 != 0) [L4556] COND FALSE !(ldv_blk_rq == 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4559] CALL ldv_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4447] __VERIFIER_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] ----- [2018-11-23 06:30:46,078 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck CFG 23.11 06:30:46 ImpRootNode [2018-11-23 06:30:46,078 INFO L132 PluginConnector]: ------------------------ END CodeCheck---------------------------- [2018-11-23 06:30:46,078 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 06:30:46,078 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 06:30:46,079 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 06:30:46,079 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 06:30:43" (3/4) ... [2018-11-23 06:30:46,085 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 06:30:46,085 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 06:30:46,086 INFO L168 Benchmark]: Toolchain (without parser) took 5002.68 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.3 MB). Free memory was 956.6 MB in the beginning and 917.7 MB in the end (delta: 38.9 MB). Peak memory consumption was 186.2 MB. Max. memory is 11.5 GB. [2018-11-23 06:30:46,087 INFO L168 Benchmark]: CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 06:30:46,087 INFO L168 Benchmark]: CACSL2BoogieTranslator took 900.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.3 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -103.7 MB). Peak memory consumption was 77.2 MB. Max. memory is 11.5 GB. [2018-11-23 06:30:46,087 INFO L168 Benchmark]: Boogie Procedure Inliner took 54.80 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. [2018-11-23 06:30:46,088 INFO L168 Benchmark]: Boogie Preprocessor took 33.22 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. [2018-11-23 06:30:46,088 INFO L168 Benchmark]: RCFGBuilder took 952.86 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 932.8 MB in the end (delta: 116.6 MB). Peak memory consumption was 116.6 MB. Max. memory is 11.5 GB. [2018-11-23 06:30:46,088 INFO L168 Benchmark]: CodeCheck took 3051.81 ms. Allocated memory is still 1.2 GB. Free memory was 932.8 MB in the beginning and 917.7 MB in the end (delta: 15.2 MB). Peak memory consumption was 15.2 MB. Max. memory is 11.5 GB. [2018-11-23 06:30:46,089 INFO L168 Benchmark]: Witness Printer took 6.93 ms. Allocated memory is still 1.2 GB. Free memory is still 917.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 06:30:46,091 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - StatisticsResult: Ultimate CodeCheck benchmark data CFG has 9 procedures, 97 locations, 1 error locations. UNSAFE Result, 2.0s OverallTime, 10 OverallIterations, 0 TraceHistogramMax, 0.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 5798 SDtfs, 3660 SDslu, 5860 SDs, 0 SdLazy, 1124 SolverSat, 856 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.3s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 1204 GetRequests, 1194 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=-1occurred in iteration=-1, traceCheckStatistics: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.3s InterpolantComputationTime, 203 NumberOfCodeBlocks, 203 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 156 ConstructedInterpolants, 0 QuantifiedInterpolants, 5852 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 9 InterpolantComputations, 9 PerfectInterpolantSequences, 20/20 InterpolantCoveringCapability, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: No data available, ReuseStatistics: No data available - UnprovableResult [Line: 4447]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 4307. Possible FailurePath: [L3729] static int major ; [L3730] static int index ; [L4303-L4306] static unsigned int features[9U] = { 0U, 2U, 1U, 4U, 5U, 6U, 7U, 9U, 10U}; [L4339] int LDV_IN_INTERRUPT ; [L4510] int ldv_blk_rq = 0; [L4084-L4085] static struct block_device_operations const virtblk_fops = {0, 0, & virtblk_ioctl, 0, 0, 0, 0, 0, 0, & virtblk_getgeo, 0, & __this_module}; [L4301-L4302] static struct virtio_device_id const id_table[2U] = { {2U, 4294967295U}, {0U, 0U}}; [L4307-L4308] static struct virtio_driver virtio_blk = {{"virtio_blk", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct virtio_device_id const *)(& id_table), (unsigned int const *)(& features), 9U, & virtblk_probe, & virtblk_remove, 0}; [L4334] struct virtio_device_id const __mod_virtio_device_table ; [L4342] struct block_device *var_group1 ; [L4343] fmode_t var_virtblk_ioctl_5_p1 ; [L4344] unsigned int var_virtblk_ioctl_5_p2 ; [L4345] unsigned long var_virtblk_ioctl_5_p3 ; [L4346] struct hd_geometry *var_group2 ; [L4347] int tmp ; [L4348] int tmp___0 ; [L4349] int tmp___1 ; [L4352] LDV_IN_INTERRUPT = 1 [L4311] int tmp ; [L4314] major = register_blkdev(0U, "virtblk") [L4315] COND FALSE !(major < 0) [L4320] tmp = register_virtio_driver(& virtio_blk) [L4321] return (tmp); [L4355] tmp = init() [L4356] COND FALSE !(tmp != 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4378] tmp___1 = __VERIFIER_nondet_int() [L4379] COND TRUE tmp___1 != 0 [L4363] tmp___0 = __VERIFIER_nondet_int() [L4365] case 0: [L4016] struct gendisk *disk ; [L4017] struct virtio_blk *vblk ; [L4018] void *usr_data ; [L4019] char id_str[20U] ; [L4020] int err ; [L4021] int tmp ; [L4022] bool tmp___0 ; [L4023] int tmp___1 ; [L4024] int tmp___2 ; [L4027] EXPR bdev->bd_disk [L4027] disk = bdev->bd_disk [L4028] EXPR disk->private_data [L4028] vblk = (struct virtio_blk *)disk->private_data [L4029] COND TRUE cmd == 1447184708U [L4030] usr_data = (void *)data [L3979] struct virtio_blk *vblk ; [L3980] struct request *req ; [L3981] struct bio *bio ; [L3982] int err ; [L3983] long tmp ; [L3984] long tmp___0 ; [L3985] long tmp___1 ; [L3986] long tmp___2 ; [L3989] EXPR disk->private_data [L3989] vblk = (struct virtio_blk *)disk->private_data [L3990] EXPR vblk->disk [L3990] EXPR (vblk->disk)->queue [L3990] bio = bio_map_kern((vblk->disk)->queue, (void *)id_str, 20U, 208U) [L3991] CALL, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4412] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4415] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, ptr={0:0}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4463] return ((unsigned long )ptr > 2012UL); [L4415] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, major=0, ptr={0:0}, ptr={0:0}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4415] tmp = ldv_is_err(ptr) [L4416] return (tmp); [L3991] RET, EXPR IS_ERR((void const *)bio) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L3991] tmp___0 = IS_ERR((void const *)bio) [L3992] COND FALSE !(tmp___0 != 0L) [L3998] EXPR vblk->disk [L3998] EXPR (vblk->disk)->queue [L4422] ldv_func_ret_type___3 ldv_func_res ; [L4423] struct request *tmp ; [L4426] tmp = blk_make_request(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L4427] ldv_func_res = tmp [L4513] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4516] COND TRUE ldv_blk_rq == 0 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=0, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4521] COND TRUE (mask == 16U || mask == 208U) || mask == 16U [L4522] ldv_blk_rq = 1 VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4429] return (ldv_func_res); [L3998] req = ldv_blk_make_request_5((vblk->disk)->queue, bio, 208U) [L3999] CALL, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={-1:-27670116106269358115}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4412] long tmp ; VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={-1:-27670116106269358115}, ptr={-1:-27670116106269358115}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4415] CALL, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, ptr={-1:-27670116106269358115}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4463] return ((unsigned long )ptr > 2012UL); [L4415] RET, EXPR ldv_is_err(ptr) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=1, major=0, ptr={-1:-27670116106269358115}, ptr={-1:-27670116106269358115}, virtblk_fops={18:0}, virtio_blk={15:0}] [L4415] tmp = ldv_is_err(ptr) [L4416] return (tmp); [L3999] RET, EXPR IS_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L3999] tmp___2 = IS_ERR((void const *)req) [L4000] COND TRUE tmp___2 != 0L [L4002] CALL, EXPR PTR_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4403] long tmp ; [L4479] return ((long )(2012UL - (unsigned long )ptr)); [L4406] tmp = ldv_ptr_err(ptr) [L4407] return (tmp); [L4002] RET, EXPR PTR_ERR((void const *)req) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4002] tmp___1 = PTR_ERR((void const *)req) [L4003] return ((int )tmp___1); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4031] err = virtblk_get_id(disk, (char *)(& id_str)) [L4032] COND TRUE err == 0 [L3217] unsigned long tmp ; [L3221] tmp = _copy_to_user(dst, src, size) [L3222] return ((int )tmp); [L4033] tmp = copy_to_user(usr_data, (void const *)(& id_str), 20U) [L4034] COND FALSE !(tmp != 0) [L4042] return (err); [L4042] return (err); VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4378] tmp___1 = __VERIFIER_nondet_int() [L4379] COND FALSE !(tmp___1 != 0) [L4556] COND FALSE !(ldv_blk_rq == 0) VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4559] CALL ldv_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] [L4447] __VERIFIER_error() VAL [__mod_virtio_device_table=0, __mod_virtio_device_table=0, __this_module={62:67}, features={25:0}, id_table={31:0}, index=0, ldv_blk_rq=1, LDV_IN_INTERRUPT=1, major=0, virtblk_fops={18:0}, virtio_blk={15:0}] * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 900.27 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.3 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -103.7 MB). Peak memory consumption was 77.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 54.80 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 33.22 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 5.4 MB). Peak memory consumption was 5.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 952.86 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 932.8 MB in the end (delta: 116.6 MB). Peak memory consumption was 116.6 MB. Max. memory is 11.5 GB. * CodeCheck took 3051.81 ms. Allocated memory is still 1.2 GB. Free memory was 932.8 MB in the beginning and 917.7 MB in the end (delta: 15.2 MB). Peak memory consumption was 15.2 MB. Max. memory is 11.5 GB. * Witness Printer took 6.93 ms. Allocated memory is still 1.2 GB. Free memory is still 917.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!vendor - GenericResult: Unfinished Backtranslation unknown boogie variable ~__mod_virtio_device_table~0!device RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 06:30:47,723 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 06:30:47,724 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 06:30:47,732 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 06:30:47,732 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 06:30:47,733 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 06:30:47,734 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 06:30:47,735 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 06:30:47,736 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 06:30:47,737 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 06:30:47,737 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 06:30:47,738 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 06:30:47,738 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 06:30:47,739 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 06:30:47,740 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 06:30:47,740 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 06:30:47,741 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 06:30:47,742 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 06:30:47,744 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 06:30:47,745 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 06:30:47,746 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 06:30:47,747 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 06:30:47,749 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 06:30:47,749 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 06:30:47,749 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 06:30:47,750 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 06:30:47,750 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 06:30:47,751 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 06:30:47,752 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 06:30:47,752 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 06:30:47,753 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 06:30:47,753 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 06:30:47,753 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 06:30:47,753 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 06:30:47,754 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 06:30:47,755 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 06:30:47,755 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf [2018-11-23 06:30:47,766 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 06:30:47,766 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 06:30:47,767 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 06:30:47,767 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 06:30:47,767 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 06:30:47,767 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 06:30:47,768 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 06:30:47,768 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 06:30:47,768 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 06:30:47,768 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 06:30:47,768 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 06:30:47,768 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 06:30:47,768 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 06:30:47,769 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 06:30:47,769 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 06:30:47,769 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 06:30:47,769 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 06:30:47,769 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 06:30:47,769 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 06:30:47,770 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 06:30:47,770 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 06:30:47,770 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 06:30:47,770 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 06:30:47,770 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 06:30:47,770 INFO L133 SettingsManager]: * Use separate solver for trace checks=false [2018-11-23 06:30:47,770 INFO L133 SettingsManager]: * Trace refinement strategy=WALRUS [2018-11-23 06:30:47,771 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 06:30:47,771 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 06:30:47,771 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 06:30:47,771 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 06:30:47,771 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7a007860a1f255f5d7c2c804e87b980a4128db63 [2018-11-23 06:30:47,805 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 06:30:47,814 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 06:30:47,817 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 06:30:47,818 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 06:30:47,819 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 06:30:47,819 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13.c [2018-11-23 06:30:47,863 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data/fdb8d7b1b/8b8960a6511e49ba8d693821bc384c3a/FLAG91a956f58 [2018-11-23 06:30:48,331 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 06:30:48,331 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-block-virtio_blk-ko--101_1a--39a1d13.c [2018-11-23 06:30:48,350 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data/fdb8d7b1b/8b8960a6511e49ba8d693821bc384c3a/FLAG91a956f58 [2018-11-23 06:30:48,622 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/data/fdb8d7b1b/8b8960a6511e49ba8d693821bc384c3a [2018-11-23 06:30:48,625 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 06:30:48,626 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 06:30:48,627 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 06:30:48,627 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 06:30:48,629 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 06:30:48,630 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 06:30:48" (1/1) ... [2018-11-23 06:30:48,632 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@478b979a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:48, skipping insertion in model container [2018-11-23 06:30:48,632 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 06:30:48" (1/1) ... [2018-11-23 06:30:48,639 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 06:30:48,697 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 06:30:49,381 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 06:30:49,396 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 06:30:49,636 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 06:30:49,696 INFO L195 MainTranslator]: Completed translation [2018-11-23 06:30:49,697 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49 WrapperNode [2018-11-23 06:30:49,697 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 06:30:49,697 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 06:30:49,697 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 06:30:49,698 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 06:30:49,705 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... [2018-11-23 06:30:49,731 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... [2018-11-23 06:30:49,759 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 06:30:49,760 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 06:30:49,760 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 06:30:49,760 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 06:30:49,768 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... [2018-11-23 06:30:49,768 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... [2018-11-23 06:30:49,773 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... [2018-11-23 06:30:49,773 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... [2018-11-23 06:30:49,788 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... [2018-11-23 06:30:49,791 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... [2018-11-23 06:30:49,794 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... [2018-11-23 06:30:49,799 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 06:30:49,799 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 06:30:49,799 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 06:30:49,800 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 06:30:49,800 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 06:30:49" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8e01cb8d-5957-4cdd-be6c-40b01d5a91f5/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 06:30:49,840 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2018-11-23 06:30:49,840 INFO L130 BoogieDeclarations]: Found specification of procedure scsi_cmd_ioctl [2018-11-23 06:30:49,840 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2018-11-23 06:30:49,840 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 06:30:49,840 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_config_buf [2018-11-23 06:30:49,841 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_config_buf [2018-11-23 06:30:49,841 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2018-11-23 06:30:49,841 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-23 06:30:49,841 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_UINT~X~$Pointer$~X~C_UINT~TO~VOID [2018-11-23 06:30:49,841 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_UINT~X~$Pointer$~X~C_UINT~TO~VOID [2018-11-23 06:30:49,841 INFO L130 BoogieDeclarations]: Found specification of procedure blk_put_request [2018-11-23 06:30:49,841 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_blkdev [2018-11-23 06:30:49,841 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-23 06:30:49,841 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-23 06:30:49,842 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-23 06:30:49,842 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-23 06:30:49,842 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_check_driver_offered_feature [2018-11-23 06:30:49,842 INFO L130 BoogieDeclarations]: Found specification of procedure virtio_has_feature [2018-11-23 06:30:49,842 INFO L138 BoogieDeclarations]: Found implementation of procedure virtio_has_feature [2018-11-23 06:30:49,842 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_virtio_driver [2018-11-23 06:30:49,842 INFO L130 BoogieDeclarations]: Found specification of procedure blk_execute_rq [2018-11-23 06:30:49,842 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2018-11-23 06:30:49,842 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 06:30:49,843 INFO L130 BoogieDeclarations]: Found specification of procedure register_virtio_driver [2018-11-23 06:30:49,843 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 06:30:49,843 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 06:30:49,843 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 06:30:49,843 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 06:30:49,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2018-11-23 06:30:49,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-23 06:30:49,843 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 06:30:49,844 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 06:30:49,844 INFO L130 BoogieDeclarations]: Found specification of procedure bio_put [2018-11-23 06:30:49,844 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 06:30:49,844 INFO L130 BoogieDeclarations]: Found specification of procedure bio_map_kern [2018-11-23 06:30:49,844 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2018-11-23 06:30:49,844 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2018-11-23 06:30:49,844 INFO L130 BoogieDeclarations]: Found specification of procedure blk_make_request [2018-11-23 06:30:49,845 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 06:30:49,845 INFO L130 BoogieDeclarations]: Found specification of procedure register_blkdev [2018-11-23 06:30:49,845 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2018-11-23 06:30:49,845 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 06:30:49,845 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 06:30:49,845 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 06:30:49,845 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 06:31:02,547 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 06:31:02,547 INFO L280 CfgBuilder]: Removed 34 assue(true) statements. [2018-11-23 06:31:02,547 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 06:31:02 BoogieIcfgContainer [2018-11-23 06:31:02,548 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 06:31:02,548 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-23 06:31:02,548 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-23 06:31:02,554 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-23 06:31:02,555 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 06:31:02" (1/1) ... [2018-11-23 06:31:02,562 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 06:31:02,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 06:31:02,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 62 states and 79 transitions. [2018-11-23 06:31:02,587 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 79 transitions. [2018-11-23 06:31:02,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2018-11-23 06:31:02,591 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 06:31:02,620 FATAL L292 ToolchainWalker]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck has thrown an exception: java.lang.IllegalArgumentException: Indexed Sort BitVec undefined at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.getSort(SortSymbol.java:177) at de.uni_freiburg.informatik.ultimate.logic.Theory.getSort(Theory.java:1243) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.sort(NoopScript.java:287) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.transferSort(TermTransferrer.java:128) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.convertApplicationTerm(TermTransferrer.java:162) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer$BuildApplicationTerm.walk(TermTransformer.java:320) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:122) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:113) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer.transform(TermTransformer.java:253) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.cfg.SmtSymbols.transferSymbols(SmtSymbols.java:129) at de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck.CodeCheckObserver.process(CodeCheckObserver.java:449) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.CFGWalker.runObserver(CFGWalker.java:57) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.runObserver(BaseWalker.java:93) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.run(BaseWalker.java:86) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:167) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:316) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2018-11-23 06:31:02,622 INFO L168 Benchmark]: Toolchain (without parser) took 13996.98 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 162.5 MB). Free memory was 943.8 MB in the beginning and 935.9 MB in the end (delta: 7.9 MB). Peak memory consumption was 170.4 MB. Max. memory is 11.5 GB. [2018-11-23 06:31:02,624 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 06:31:02,624 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1070.54 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 162.5 MB). Free memory was 938.5 MB in the beginning and 1.1 GB in the end (delta: -130.2 MB). Peak memory consumption was 91.7 MB. Max. memory is 11.5 GB. [2018-11-23 06:31:02,625 INFO L168 Benchmark]: Boogie Procedure Inliner took 62.09 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2018-11-23 06:31:02,625 INFO L168 Benchmark]: Boogie Preprocessor took 39.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2018-11-23 06:31:02,626 INFO L168 Benchmark]: RCFGBuilder took 12748.29 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 942.6 MB in the end (delta: 112.7 MB). Peak memory consumption was 112.7 MB. Max. memory is 11.5 GB. [2018-11-23 06:31:02,626 INFO L168 Benchmark]: CodeCheck took 73.69 ms. Allocated memory is still 1.2 GB. Free memory was 942.6 MB in the beginning and 935.9 MB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2018-11-23 06:31:02,628 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: IllegalArgumentException: Indexed Sort BitVec undefined: de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1070.54 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 162.5 MB). Free memory was 938.5 MB in the beginning and 1.1 GB in the end (delta: -130.2 MB). Peak memory consumption was 91.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 62.09 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 39.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 12748.29 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 942.6 MB in the end (delta: 112.7 MB). Peak memory consumption was 112.7 MB. Max. memory is 11.5 GB. * CodeCheck took 73.69 ms. Allocated memory is still 1.2 GB. Free memory was 942.6 MB in the beginning and 935.9 MB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...